基于纵深防御的网络安全防护体系

Network security protection system based on defense in depth

伴随着信息化深入人们的日常生活,网络安全变得尤为重要,网络安全事件给政企单位带来了巨大的压力和损失,网络安全对运维人员的要求也越来越高,传统的非体系化网络安全防护已经很难应对日益变化的网络攻击方式。文章针对当下严峻的网络安全现状及网络安全工作存在的不足,构建出基于物理、网络、主机、应用、数据、人员管理6个层面的纵深防御体系,提升政企网络安全防护能力,为网络安全建设提供参考。

With the deepening of information technology in our daily life,network security has become particularly important.Network security threats have brought huge pressure and losses to government and enterprise units.Network security has become increasingly demanding for operation and maintenance personnel.The traditional non-systematic network security protection has been difficult to meet the ever-changing network attack methods.This paper aims at the current severe network security situation and the shortcomings of network security work,Build a defense-in-depth system based on six levels of physics,network,host,application,data and personnel management,improve the network security protection ability of government and enterprises,and provide reference for network security construction.