基于零信任架构的医院安全网关构建

Construction of hospital security gateway based on zero-trust architecture

目的:解决日益严峻的医院网络安全问题,探讨一种更加安全的网络技术架构。方法:以江苏省人民医院为例,通过构建零信任安全网关,对前端页面底层代码进行持续动态变换,对浏览器指纹进行采集,采用浏览器类型验证等技术,以验证客户端的合法性,有效对抗各类攻击行为。结果:通过构建零信任安全网关系统,业务系统受到的攻击被有效拦截,数据显示网关上线后的未授权访问拦截数量和拦截率显著高于实施前(P<0.05)。结论:零信任网络安全架构为医院提供了一种有效的网络安全解决方案,可显著增强医院的网络安全防护能力。

Objective To solve the increasingly serious problem of hospital network security,and to explore a more secure network technology architecture.Methods Taking Jiangsu Provincial People's Hospital as an example,by constructing a zero-trust security gateway,continuously and dynamically transforming the underlying code of the front-end page,collecting browser fingerprints,and applying browser type verification and other technologies,the legitimacy of the client was verified and various types of attacks were effectively counteracted.Results Through the construction of the zero-trust security gateway system,the attacks on the business system were effectively intercepted,and the data showed that the number of unauthorized access interceptions and the interception rate after the gateway was launched were significantly higher than those before implementation(P<0.05).Conclusion Zero-trust network security architecture provides an effective network security solution for hospitals,which can significantly enhance their network security protection capability.