基于网络安全滑动标尺的安全防护体系建设探讨
|
摘要
2015年,美国系统网络安全协会(SANS)提出了网络安全滑动标尺模型,将网络安全体系建设过程分为架构建设、被动防御、积极防御、威胁情报和进攻反制五个阶段,按照每个阶段的建设水平来对安全防护能力进行评估,并指导未来安全防护能力的建设。本文将通过对网络安全滑动标尺模型的深入剖析,来探讨如何借助该模型更好的开展安全防护体系建设工作。
In 2015,the American Association for Systems and Network Security( SANS) proposed a sliding scale model for network security,which divides the construction process of network security system into five stages :architecture construction,passive defense,active defense,Threat Intelligence and offensive countermeasure.It evaluates the security protection capability according to the construction level of each stage,and guides the construction of future security protection capability.This paper will discuss how to use this model to better carry out the construction of security protection system through in-depth analysis of the sliding scale model of network security.
In 2015,the American Association for Systems and Network Security( SANS) proposed a sliding scale model for network security,which divides the construction process of network security system into five stages :architecture construction,passive defense,active defense,Threat Intelligence and offensive countermeasure.It evaluates the security protection capability according to the construction level of each stage,and guides the construction of future security protection capability.This paper will discuss how to use this model to better carry out the construction of security protection system through in-depth analysis of the sliding scale model of network security.
引文
[1]吕毅:从攻击视角构建弹性信息安全防御体系.