网络安全数字化管理平台建设研究

Research on the construction of digital management platform for network security

随着云计算、大数据、移动互联网等新技术的大规模应用,各种网络安全威胁无处不在。各行业为了保障网络安全,投入大量资金和人力,积极开展网络安全研究和建设,从技术角度部署了大量的网络安全设备。根据专业调研机构报告显示,65%的安全问题来自于内部的不作为、疏忽、误操作、泄露、恶意破坏等,三分技术七分管理,管理已成为安全保障的瓶颈。在分析网络安全管理方面存在的问题的基础上,提出了通过构建运营管理中心,实现系统资产、组织人员、制度流程的统一管理,以及系统运行与管理过程的全面管控,实现从人为驱动的粗放管理向数据驱动的精细化运营管理转变,解决管理技术与管理安全的难题。

With the large-scale application of new technologies such as cloud computing,big data,and mobile internet,various network security threats are ubiquitous.In order to ensure network security,various industries have invested a large amount of funds and manpower,actively carried out network security research and construction,and deployed a large number of network security equipment from a technical perspective.According to reports from professional research institutions,65%of security issues come from internal inaction,negligence,misoperation,leakage,malicious damage,etc.Three points of technology and seven points of management have become the bottleneck of security.This article mainly analyzes the problems existing in network security management,and proposes to build an operation management center to achieve unified management of system assets,organizational personnel,and institutional processes,as well as comprehensive control of system operation and management processes,to achieve a transition from human driven extensive management to data driven refined operation management,and to solve the challenges of management technology and management security.