摘要
针对信息系统漏洞的直接修复方案带来的一系列问题,提出了基于动态系统画像的漏洞风险遏制方案。方案通过对系统资产以及漏洞的统一管控,分析漏洞的风险以及风险路径,对系统的风险进行动态画像。针对画像中的风险以及风险路径,结合修复操作、风险影响面进行决策分析,形成从风险控制到消除的一组风险遏制方案。再通过运维人员对方案的实施,完成画像中风险点的消除,形成对风险的一套闭环管理方案。
In view of the series of drawbacks brought by the direct repair scheme for information system vulnerabilities,it proposes a vulnerability risk containment scheme based on dynamic system security portrait.Through the unified management of the system's assets and vulnerabilities,the scheme analyzes the risks and risk paths of the vulnerabilities,and dynamically profiles the risks of the system.According to the risks and risk paths in the portrait,and combined with the repair operation and risk impact surface,the decision-making analysis is made,which forms a set of risk containment schemes from risk control to elimination.Then through the implementation of the scheme by the operation and maintenance personnel,the elimination of the risk points in the portrait is completed,and a set of closed-loop management schemes for risks is formed.
作者
杨丽丽
刘果
李发财
戚大强
张彬
高贯银
Yang Lili;Liu Guo;Li Facai;Qi Daqiang;Zhang Bin;Gao Guanyin(China Information Technology Designing&Consulting In-stitute Co.,Ltd.,Beijing 100048,China;China United Network Communications Group Co.,Ltd.,Beijing 100033,China)
出处
《邮电设计技术》
2022年第9期19-23,共5页
Designing Techniques of Posts and Telecommunications
关键词
系统安全画像
决策分析
风险遏制
动态调整
System security portrait
Decision analysis
Risk containment
Dynamic adjustment
