摘要
随着交通运输信息化建设不断深化,交通运输基础设施运行管理、交通经济运行对网络和信息系统的依赖程度越来越高,现代交通运输行业生产、运行、管理、决策都离不开信息化支撑。而当今,交通运输网络安全面临严峻和复杂的局面,网络安全事件发生难以避免。应急处置是网络安全的最后一道防线。建立规范有序、协同联动、权责明确的应急处置机制是保障网络安全应急处置效率及效果的关键。本文主要针对网页篡改、系统瘫痪及信息破坏等三类网络安全事件发现、响应处置,按照事前监测预警、事中报告处置,事后恢复及追责的流程进行分析研究。
As the gradually depth of Information Construction,transport infrastructure operation management and economic operation become more dependent on information technology.However,network security faces a severe and complicated situation nowadays,while the Emergency response become the last defense against network security incidents.The key to ensure the efficiency and effectiveness of network security emergency response is to establish a standardized,coordinated,and conscientious emergency response mechanism.in line with the procedures of prior monitoring,reporting and disposal,restore and accountability,this paper has been analyzing the emergency response procedure in accordance with incidents classification which include webpage tamper,system failures and information destruction.
作者
周艳芳
杨艳芳
ZHOU Yanfang;YANG Yanfang(Research Institute of Highway Ministry of Transport,Beijing 100088,China;China Academy of Transportation Sciences,Beijing 100029,China)
出处
《综合运输》
2021年第7期56-59,103,共5页
China Transportation Review
基金
中央级公益性科研所基本科研业务费专项资金项目:交通运输行业信息系统个人信息和隐私权保护研究(2019-0022),交通运输行业数据分类分级研究(2019-0021)。
关键词
网络安全
网络安全事件
应急处置
响应流程
Network security
Network security incident
Emergency handling
Response procedures