国家自然科学基金委员会网络安全现状与展望

Network security of the National Natural Science Foundation of China:today and prospects

国家自然科学基金委员会(以下简称自然科学基金委)负责根据国家发展科学技术的方针、政策和规划,有效运用国家自然科学基金,支持基础研究,坚持自由探索,发挥导向作用,发现和培养科学技术人才,促进科学技术进步和经济社会协调发展。随着以信息化技术为代表的新生产力不断发展,自然科学基金委一直致力于推动基金管理工作的信息化与智能化。业务种类愈加复杂,在信息化建设中遇到信息泄露攻击等各类网络攻击,使得网络安全面临严峻挑战。以自然科学基金委网络安全建设为主线,介绍现有平台网络安全建设情况,目前已建成以科学基金项目管理为核心的网络安全体系架构,保障网络系统的安全稳定运行。分析介绍自然科学基金委主要的信息系统(自然科学基金共享服务网、业务部门网站、电子邮件系统)及其面临的主要威胁情况,给出后续信息化与网络安全建设中的思考与建议。自然科学基金委将开启新一代网络安全的建设,在充分考虑科学基金评审、管理及开放共享特点前提下,达到“更智能、更安全、更完善”的总体目标,为相关单位开展网络安全系统建设提供借鉴。

The National Natural Science Foundation of China(hereinafter referred to as the Natural Science Foundation of China)is responsible for effectively utilizing the National Natural Science Foundation of China,supporting basic research,adhering to free exploration,playing a guiding role,and discovering and cultivating science and technology in accordance with the national guidelines,policies and plans for the promotion of scientific and technological progress and coordinated economic and social development.With the continuous development of new productive forces represented by information technology,the Natural Science Foundation of China has been committed to promoting the informatization and intelligence of fund management.With the increasing complexity of business types,various types of network attacks,such as information leakage attacks,are encountered in the construction of informatization and make network security face severe challenges.The network security construction of the Natural Science Foundation of China was took as the main line and the network security construction of the existing platform was introduced.At present,a network security system structure with the science fund project management as the core has been established to ensure the safe and stable operation of the network system.The main information systems of the Natural Science Foundation of China(Natural Science Foundation Shared Service Network,business department website,email system)and its main threats were analyzed and introduced.Then the thoughts and suggestions in the follow-up informatization and network security construction were given.The Natural Science Foundation of China will start the construction of a new generation of secure network.Under the premise of fully considering the characteristics of science fund review,management,and open sharing,it will achieve the overall goal of“smarter,safer,and better”and carry out network security system construction for relevant units.