摘要
信息技术的飞速发展给人们的工作、生活带来越来越多便利,同时也带来了越来越严峻的安全问题。针对通信网络安全防护问题,本文首先结合目前国家相关法律政策、技术标准等,梳理了我国通信网络安全保护工作发展形势,然后结合通信网络安全防护测评项目的实践经验,分析总结通信网络安全防护测评的适用对象、定级方法、符合性测评、风险评估等内容。最后,本文针对通信网络安全防护测评工作中遇到的相关问题进行分析,提出应对策略,为今后通信网络安全防护测评工作提供借鉴。
With the rapid development of information technology,people’s work and life have become more and more convenient.However,with the widespread application of communication technology,increasingly serious security issues have emerged,which have also had a huge impact on users.Aiming at mitigating above issues,this article first combines relevant national laws,policies,technical standards,and other documents to sort out the development situation of communication network security protection work in China.Then,based on the practical experience of communication network security evaluation project,a detailed summary and sharing were conducted on the applicable objects,classification methods,compliance evaluation,risk assessment,and other contents of the communication network security evaluation.Finally,relevant issues encountered in the evaluation of communication network security protection were analyzed,and effective response strategies are proposed.This work provides reference for future communication network security protection evaluation work.
作者
张春柳
刘丰源
张孟
Zhang Chuniu;Liu Fengyuan;Zhang Meng(Shanghai Key Laboratory of Computer Software Testing&Evaluating,Shanghai,201112;Shanghai Development Center of Computer Software Technology,Shanghai,201112)
出处
《工业信息安全》
2023年第5期68-76,共9页
Industry Information Security
关键词
网络安全
符合性评测
风险评估
通信网络安全
Network Security
Conformity Evaluation
Risk Assessment
Communication Network Security