基于IATF思想的网络安全设计和建设

文中从企业信息化建设的需要出发,为了加强企业网络安全,应用IATF和安全域设计思想、防护策略,提出了在企业网络整合过程中的网络安全防护设计解决方案,并结合浙江中烟的实际需求,给出了实施建议方案。同时,在实践中引进工程监理机制,为建设信息安全保障体系提供了基础,IATF纵深防御思想和等级保护在信息系统安全建设中也有较好的应用,为企业根据具体情况进行个性化的定制设计及实施提供了一个比较成功的实例。

IATF-based Network Security Design and Construction

Based on the needs of enterprise information construction and in order to reinforce the enterprise network security and apply the idea and protection polices of IATF and security domain, a set of network protection solutions are proposed in the network integration process of China Tobacco Zhejiang Industry. Meanwhile, some supervision mechanism is introduced into the practical implementation, which constitutes a good foundation for the information security assurance system. The thoughts of in-depth defense ...