水利网络安全工作平台设计与应用

Design and application of water conservancy cybersecurity work platform

针对水利网络安全监管任务重、对象多、效率低的管理难点,为提升网络安全管理工作效能,结合国家网络安全主管部门要求及水利行业网络安全现状,按照“一整、一符、四化”的改进思路,研究应用分布式大数据、高度灵活定制的低代码编程、自动化数据融合等技术,以及移动端联动等手段,设计建立包括应用业务层、数据处理层、基础设施层和运行环境层共同组成的水利网络安全工作平台,并基于安全通报、重保任务、等保管理、安全检查等功能模块,创新实现平台的快速检索、大数据动态分析展示与高弹性扩展、安全态势数据自定义上报、全程在线闭环业务处理、高危安全事件及时送达及响应与处置。实际应用表明:平台可大幅提升水利行业网络安全监管效率,助力构建主动智能、快速高效的水利网络安全防线,为支撑水利行业网络安全管理发挥重要作用。

The management issues of water conservancy cybersecurity supervision has multi-tasksand multiple objects with low efficiency. In order to improve the efficiency, a strategy following “integration, conformation and modernization” idea is proposed based on the requirements of the national cybersecurity department and the current situation of cybersecurity in the water conservancy industry. This paper applies advanced techniques including distributed big data, highly flexible and customized low-code, automatic data fusion and mobile terminal connection, so that a water conservancy cybersecurity work platform is developed including application business layer, data processing layer, infrastructure layer and operating environment layer. With functional modules such as security notification, reinsurance tasks, classified protection management, and safety inspection, the platform realizes innovatively the fast retrieval, dynamic analysis and display of big data and highly elastic expansion, customized reporting of security situation data, online closed-loop business processing, and the timely delivery, response and disposal of high-risk security incidents. Practical results show that the platform can significantly improve the efficiency of cybersecurity supervision in the water conservancy industry, and can support to build an active, intelligent,effective and efficient water conservancy cybersecurity defense, which will play an important role in the cyberecurity management of the water conservancy industry.