Automatic Verification Analysis Technology of Network Security Domain

Xiaofeng Liu; Bin Tan; Lan Qiu; Huanru Wang

doi:10.11959/j.issn.1000-0801.2015020

您当前的位置：

首页 >

文章列表页 >

Automatic Verification Analysis Technology of Network Security Domain

Wide operating technology | 更新时间：2024-06-05

- Automatic Verification Analysis Technology of Network Security Domain
- Telecommunications Science Vol. 31, Issue 1, Pages: 171-175(2015)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2015020
  CLC：
- Published Online：2015-01，
  
  Published：20 January 2015
- 稿件说明：
移动端阅览
Xiaofeng Liu, Bin Tan, Lan Qiu, et al. Automatic Verification Analysis Technology of Network Security Domain[J]. Telecommunications science, 2015, 31(1): 171-175.
DOI：

Xiaofeng Liu, Bin Tan, Lan Qiu, et al. Automatic Verification Analysis Technology of Network Security Domain[J]. Telecommunications science, 2015, 31(1): 171-175. DOI： 10.11959/j.issn.1000-0801.2015020.

摘要

通过对网络安全域自动核查分析技术的研究与应用，实现了安全域拓扑自动还原以及安全域设备互联关系、安全域边界及边界访问控制策略的自动核查。通过自动化、常态化和流程固化的方式，及时发现违反安全域规定的行为，确保边界访问控制策略最小化，确保网络安全域划分的持续合规，降低安全域管理的相关风险。

Abstract

By studying the automatic verification analysis techniques of network security domain

a secure domain topology automatically restore and security domains devices interconnected relations

security domain boundaries and border access control policy automatic verification were achieved. Through automation

normalization and processes curing methods

violations of the security domain provisions of the act were detected. It ensures border access control policy is minimized and network security domain is divided continued compliance

reduces the risks associated with the security domain management.

关键词

Keywords

references

邱岚，谭彬 . 安全域划分研究与应用 . 计算机安全， 2012 ( 6 )

Qiu L , Tan B . Research and application of security domain . Computer Security , 2012 ( 6 )

中国移动通信集团公司 . 中国移动支撑系统安全域划分与边界整合技术要求， 2008

China Mobile Communications Corporation . Technical Specification of Secure Domain and Boundary Convergence for Supporting Systems , 2008

GB/T 25058-2010. 信息安全技术信息系统安全等级保护实施指南， 2010

GB/T 25058-2010.Information Security Technology-Implementation Guide for Classified Protection of Information System , 2010

李萍，于慧龙 . 大型信息系统安全域划分和等级保护 . 计算机安全， 2006 ( 7 )

Li P , Yu H L . Large-scale information systems security domain partitioning and graded protection . Computer Security , 2006 ( 7 )

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration

Construction of Intensive Security Domain Protection System for Service Platform——Discussion of Security Domain Division and Boundary Integration

Preliminary Study on the Security Domain Transformation of SMS Platform

Related Author

Xiaohui YAO

Qing LI

Kunkun SUN

Xianyi Qiu

Hong Li

Siwei Huang

Related Institution

Mobile Internet System and Application Security National Engineering Laboratory

Research Institute of China Telecom Co., Ltd.

Institute of Information Engineering,Chinese Academy of Science

Guangdong Branch of China Telecom Co., Ltd.

Network Operation ＆ Maintenance Division,China Telecom Corporation

⁰