计算机网络应急响应研究

计算机网络应急响应在保障信息安全上起到越来越重要的作用。该文介绍了国外网络信息安全应急响应的经验、管理和技术,重点分析了应急响应机构CERT/CC、CSRC、CIAC网站的内容、组成和体系结构,包括有:多种操作平台的安全资源信息、最新技术动态和研究方向、系统运用工程学研究计算机网络安全、评估安全威胁态势、预测未来网络可能面临的威胁、应急响应流程和协调、培训方式等,并在此基础上,提出了国内网络系统管理员应注意和改进的建议。该文为发展国内网络应急响应服务和维护计算机网络安全提供了参考和借鉴。

The Analysis of Computer Network Emergency Response

Computer network emergency response plays a more and more important role in protecting information system. The article introduces the experience, administration and technology of foreign advanced network emergency response by analyzing the website of world leading computer network emergency response institutes CERT/CC, CSRC and CIAC, which include: security information resources for multi-operation system, latest technology development and researches, engineering research on computer network security, evaluation of situational awareness, forecast of possible threat on network, emergency response process and coordination, training and etc. Based on the research, the author gives her suggestions to domestic system administrators. The article is to provide reference for the development of domestic network emergency response service and system security maintenance.