空间环境科学数据安全分级概念框架研究

Research on the Security Classification Conceptual Framework of Space Environment Scientific Data

建立多维度、全面覆盖空间环境数据资源特性的安全分级概念框架,形成领域数据安全分级规则,是落实国家数据安全法要求,开展细粒度的领域数据安全分级管理工作的必要前提。空间环境科学数据资源具有多来源、多类型、多时空分辨率、多模态等特点,国家空间科学数据中心为满足流通共享、学科应用与安全管理等多方面的需求,通过个案研究法、定性分析法对其他行业领域数据安全分级标准的级别划分方法与不同级别数据资源特征进行梳理分析。研究形成基于领域和数据资源特点组和后逆向分析数据遭到破坏后对不同影响对象的影响程度,并将影响程度映射到数据安全分级规则后确定安全级别的逻辑主线,构建了能够适用于各类空间环境科学数据的安全分级概念框架。空间环境科学数据安全分级概念框架提出了领域数据分类基础上识别数据特征识别的方法,给出了依据保密性、完整性、可获取性和真实性的安全影响评估的方法和数据安全分级规则参考框架,为空间环境领域数据安全分级管理的落地实施提供依据,为领域重要数据目录的形成提供支撑。

It is necessary that establish a multi-dimensional and comprehensive security classification framework for space environmental data resources and form domain data security classification rules for complying with the requirements of the Data Security Law of the People's Republic of China and carrying out fine-grained domain data safety grading management.Space environmental scientific data resources are characterized by multiple-sources,multiple types,multiple spatial and temporal resolutions,and multiple modes.In order to meet the needs of data flow and sharing,domain data application,security management and so on,the National Space Science Data Center(NSSDC)has combined and analyzed the classification methods and features of different levels of data resources for the data security classification standards in other industries through case study and qualitative analysis.A logical line for determining the security level following damage is established by mapping it to data security classification rules,based on domain and data resource characteristics as well as post-reverse analysis.Based on these findings,a conceptual framework for data safety classification is developed that can be applied to various types of space environmental scientific data.The conceptual framework of space environmental scientific data security classification proposes a methodology for identifying data features based on domain data classification,and provides an approach for assessing security impacts based on confidentiality,integrity,accessibility,and authenticity.It also presents a reference framework for data security classification rules,which serves as the foundation for implementing data security classification management in the field of space environment and supports the establishment of an important data catalog in this domain.