指挥控制系统的信息安全要素

指挥控制系统的信息安全包括保密通信、信息认证、入侵检测和病毒防范.系统易受攻击的环节是局域网与通信链路,需采取链路加密和端到端加密措施.报文信息的鉴别认证可采用差错控制码、报文鉴别码与数字签名进行.采用反常检测统计和基于规则的检测技术进行入侵检测.病毒防范可采用反病毒软件、防火墙、类属解密和数字免疫系统等新型反病毒措施.

Problem of Information Security in C3I System

Information security of the C3I system includes communication security, information authentication, intrusion detection and virus defence. Parts easy to attack in the system are LAN and communication link, which need to take link encrypting and point-to-point encrypting. Message information may be authenticated with error-control code, message authenticated code and digital signature. Statistical abnormality examining and examining based on rule are generally accepted in intrusion detection module. Virus defence includes antivirus software, fireproof, generic decryption and digital immunity system.