【正文】 北醫(yī)三院 等級保護(hù) 方案 1 XX 醫(yī)院 等級保護(hù)方案 北京網(wǎng)御星云信息技術(shù)有限公司 2020 年 12 月 北醫(yī)三院 等級保護(hù) 方案 2 目 錄 1 工程項目背景 ......................................................................................................................................6 2 系統(tǒng)分析 ..............................................................................................................................................7 3 等級保護(hù)建設(shè)流程 .............................................................................................................................8 4 方案參照標(biāo)準(zhǔn) ................................................................................................................................... 10 5 安全區(qū)域框架 ................................................................................................................................... 11 6 安全等級劃分 ................................................................................................................................... 12 定級流程 ............................................................................................................................ 12 定級結(jié)果 ............................................................................................................................ 14 7 安全風(fēng)險與需求分析 ..................................................................................................................... 15 安全技術(shù)需求分析 .................................................................................................................... 15 物理安全風(fēng)險與需求分析 ............................................................................................ 15 計算環(huán)境安全風(fēng)險與需求分析 .................................................................................... 15 區(qū)域邊界安全風(fēng)險與需求分析 .................................................................................... 18 通信網(wǎng)絡(luò)安全風(fēng)險與需求分析 .................................................................................... 19 安全管理需求分析 .................................................................................................................... 21 8 技術(shù)體系方案設(shè)計 .......................................................................................................................... 22 方案設(shè)計目標(biāo) ............................................................................................................................. 22 方案設(shè)計框架 ............................................................................................................................. 22 安全技術(shù)體系設(shè)計 .................................................................................................................... 25 物理安全設(shè)計 ................................................................................................................... 25 計算環(huán)境安全設(shè)計 .......................................................................................................... 26 身份鑒別 ......................................................................................................................... 26 訪問控制 ......................................................................................................................... 27 系統(tǒng)安全審計 ................................................................................................................. 28 北醫(yī)三院 等級保護(hù) 方案 3 入侵防范 ......................................................................................................................... 29 主機惡意代碼防范 ......................................................................................................... 30 軟件容錯 ......................................................................................................................... 31 數(shù)據(jù)完整性與保密性 ..................................................................................................... 31 備份與恢復(fù) ..................................................................................................................... 33 資源控制 ......................................................................................................................... 33 客體安全重用 ................................................................................................................. 34 抗抵賴 ............................................................................................................................. 35 區(qū)域邊界安全設(shè)計 .......................................................................................................... 35 邊界訪問控制 ................................................................................................................. 35 邊界完整性檢查 ............................................................................................................. 37 邊界入侵防范 ................................................................................................................. 37 邊界安全審計 ................................................................................................................. 38 邊界惡意代碼防范 ......................................................................................................... 39 通信網(wǎng)絡(luò)安全設(shè)計 .......................................................................................................... 39 網(wǎng)絡(luò)結(jié)構(gòu)安全 ................................................................................................................. 39 網(wǎng)絡(luò)安全審計 ................................................................................................................. 40 網(wǎng)絡(luò)設(shè)備防護(hù) ................................................................................................................. 40 通信完整性 ..................................................................................................................... 41 通信保密性 ...................................................................