军工单位涉密网中信息导出的安全风险分析

Security Risk Analysis of Information Export in Classified Network of Military Enterprises

为降低军工单位信息导出利用的安全风险,通过对军工单位涉密网上涉密、敏感、非密信息的存在形式及导出利用情况进行阐述,分析其在涉密网上的导出场景及管理状况,比较分散与集中输出、人工与技术管控的优缺点,指出了在信息导出过程中因误操作、恶意行为等带来的失泄密隐患。根据目前涉密网管理的实际情况,提出具有操作性的技术和管理措施,加固涉密网信息安全的防火墙,有助于防范失泄密事件的发生。

In order to reduce the security risk of information export in military enterprises,the existence forms and export utilization of classified,sensitive and unclassified information in classified network of military enterprises are reviewed.By analyzing the export scenarios and management status,the hidden risks of information leakage caused by misuse and malicious behaviors in the process of information export are pointed out based on the comparison of advantages and disadvantages of decentralized or centralized export and manual or technical control.According to the current management of classified networks,practical technical and management measures are proposed to build a security firewall for classified network and help prevent the occurrence of confidentiality breaches.