民航数据安全风险评估体系探讨

Discussion on Civil Aviation Data Security Risk Assessment System

智慧民航建设工作的持续推动,使民航数据安全的重要性进一步提升,民航行业对数据安全工作高度关注,出台了一系列的政策要求,但是民航行业数据数量多、类型复杂,并且分布广的特点,给数据安全保护工作带来一系列挑战。以GB/T 20984—2022《信息安全技术信息安全风险评估方法》为基础,在数据资产识别、数据安全威胁、安全措施有效性识别、脆弱性识别,以及民航数据安全风险分析及评价方面,深入结合民航数据特点对相关模型、方法以及工具进行了探讨,通过对民航数据安全风险评估体系的研究,为推动民航数据安全保护工作奠定基础。

The continued promotion of smart civil aviation construction further increases the importance of civil aviation data security.The civil aviation industry pays great attention to data security and releases a series of policy requirements,but the civil aviation industry has a large number of data,complex types and wide distribution, which brings many challenges to data security protection. Based on the GB/T 20984—2022 Information Security Technology - Risk Assessment Method for Information Security, in termsof data asset recognition, data security threats, security measure effectiveness recognition, vulnerabilityrecognition, as well as civil aviation data security risk analysis and evaluation, and further combiningwith the characteristics of civil aviation data, this paper discusses the relevant models, methods and tools.Through the research on the risk assessment system of civil aviation data security, it lays the foundation forpromoting the civil aviation data security protection work.