基于等保三级标准的Linux服务器安全防护

Implementation of Linux Server Security Protection Based on Equal-guarantee Three-level Standard

Linux系统是众多应用程序后端和数据库服务器的主机操作系统。身份验证薄弱、漏洞未修补、服务器错误配置是威胁Linux系统稳定性和安全性的主要因素。网络安全等级保护制度2.0标准体系配合网络安全法的实施和落地,可有效提升应对网络安全风险能力。建立Linux操作系统安全配置基线,应当按照等级保护安全计算环境之服务器三级测评标准,以CentOS7.5为研究对象,围绕身份鉴别、访问控制、安全审计和入侵防范等安全要求,构建安全可信的计算环境。

Linux is the host operating system for many application back-end and database servers.Weak authentication,unfixed vulnerabilities,and server misconfiguration are the main factors threatening the stability and security of the Linux system.The network security level protection system 2.0 standard system can effectively improve the ability to deal with network security risks with the implementation of the network security law.According to the server three-level evaluation standard of hierarchical protection secure computing environment,this paper takes CentOS7.5 as the research object,and establishes the security configuration baseline of Linux operating system around the security requirements such as identity authentication,access control,security audit and intrusion prevention,so as to improve the security of Linux operating system and build a secure and trusted computing environment.