关键信息基础设施行业网络安全应急指挥平台建设研究

Research on the construction of network security emergency management platform in key information infrastructure industry

随着信息化的深入发展,网络安全问题日益突出,网络安全事件呈现频发态势。各种安全威胁不断被放大和演变,国内网络安全形势日益严峻复杂。网络安全应急指挥平台作为网络安全应急管理的信息化手段,通过安全监测中心或安全运维人员提供安全事件报告,对网络环境中的敏感操作、违规操作、攻击事件、告警事件等进行实时预警,根据事件类型调用应急预案知识库,并下发应急处置通告,为应急处置小组提供预案技术支撑,及时有效地控制、减轻和消除因安全事件造成的损失和危害,保护关键基础设施运营者利益,维护网络空间安全。

With the in-depth development of information technology, the problem of network security is becoming increasingly prominent, and network security events show a frequent trend. Various security threats are constantly amplified and evolved,and the domestic network security situation is becoming more and more severe and complex. As an information-based means of network security emergency management, the network security emergency command platform provides security event reports through the security monitoring center or security operation and maintenance personnel, carries out real-time early warning on sensitive operations, illegal operations, attack events and alarm events in the network environment, calls the emergency plan knowledge base according to the event type, and issues emergency disposal notices, Provide technical support for the emergency response team, timely and effectively control, reduce and eliminate losses and hazards caused by security events, protect the interests of key infrastructure operators and maintain Cyberspace Security.