摘要
随着“两化融合”管理体系的深度推进,国内油气田公司信息化建设步入快车道,信息安全风险日益突出。面对复杂的信息化环境,通过提升网络安全、桌面终端安全、服务器安全、数据安全等四方面体系建设来规避信息化安全风险已成为企业稳定发展的重要基石。为此,以中国石油西南油气田公司为例,通过分析目前信息化安全体系方面存在的问题,对标新型的信息化安全技术,找到提升油气田公司信息化安全体系建设的突破口,并提出相应体系的建设意见。研究结果表明:①油气田公司在网络安全方面的能力正迎头赶上国际先进水平,态势感知平台的部署加强了公司网络安全体系;②在桌面终端安全方面存在着“走弯路”的现象,活动目录服务器的效果能达到源头切断终端用户的不安全行为;③在服务器安全方面亟待设备资源整合、管理优化,私有云计算技术的部署提高了公司服务器、存储管理水平;④在数据安全方面通过在线磁盘备份、离线磁带备份、灾难备份的策略提供完善的数据备份解决方案。
With in-depth proceeding of an"industrialization-informatization integration"management system,the information construction of domestic oil and gasfield companies steps into a fast traffic lane,and corresponding information security risk may get acute increasingly.Facing complex information environment,the important foundation for stable development is to evade the risk by improving system construction from four aspects of network security,desktop terminal security,server security,and data security.So,a case study was carried out on PetroChina Southwest Oil&Gasfield Company.After some problems existing in current information security system were analyzed,referring to novel information security technologies,the breakthrough to the construction of information security system was made for the company,and several corresponding suggestions were proposed.Results show that,(1)Southwest Oil&Gasfield Company is catching up with an international advanced level in term of network security,and the deployment of situation awareness platform enhances its network security system;(2)one phenomenon of"taking a wrong path"appears in the desktop terminal security,and an application of active directory server can cut down unsafe behaviors of terminal users from very beginning;(3)server security is deficient with resource waste,disorderly management,and long and anomaly treatment time,and deployment of private cloud technology lifts management level for both server and storage;and(4)strategies of online disk backup,offline tape backup,and backup for disaster recovery may provide complete solution for data backup.In conclusion,improving a safety protection ability in some key links(e.g.network,terminal,server,and data)plays a crucial role in the high-quality development of one enterprise.
作者
郭渝
胡畔宁
刘欢
Guo Yu;Hu Panning;Liu Huan(CDB Operating Company,PetroChina Southwest Oil&Gasfield Company,Chengdu,Sichuan 610051,China;Communication and In formation Technology Center,PetroChina Southwest Oil&Gasfield Company,Chengdu,Sichuan 610051,China)
出处
《天然气技术与经济》
2019年第5期79-83,共5页
Natural Gas Technology and Economy
关键词
信息安全
网络安全
桌面终端安全
服务器安全
数据安全
Information security
Network security
Desktop terminal security
Server security
Data security
