【正文】 ....................................................................................................... 14 7 安全風(fēng)險與需求分析 ..................................................................................................................... 15 安全技術(shù)需求分析 .................................................................................................................... 15 物理安全風(fēng)險與需求分析 ............................................................................................ 15 計算環(huán)境安全風(fēng)險與需求分析 .................................................................................... 15 區(qū)域邊界安全風(fēng)險與需求分析 .................................................................................... 18 通信網(wǎng)絡(luò)安全風(fēng)險與需求分析 .................................................................................... 19 安全管理需求分析 .................................................................................................................... 21 8 技術(shù)體系方案設(shè)計 .......................................................................................................................... 22 方案設(shè)計目標(biāo) ............................................................................................................................. 22 方案設(shè)計框架 ............................................................................................................................. 22 安全技術(shù)體系設(shè)計 .................................................................................................................... 25 物理安全設(shè)計 ................................................................................................................... 25 計算環(huán)境安全設(shè)計 .......................................................................................................... 26 身份鑒別 ......................................................................................................................... 26 訪問控制 ......................................................................................................................... 27 系統(tǒng)安全審計 ................................................................................................................. 28 北醫(yī)三院 等級保護(hù) 方案 3 入侵防范 ......................................................................................................................... 29 主機(jī)惡意代碼防范 ......................................................................................................... 30 軟件容錯 ......................................................................................................................... 31 數(shù)據(jù)完整性與保密性 ..................................................................................................... 31 備份與恢復(fù) ..................................................................................................................... 33 資源控制 ......................................................................................................................... 33 客體安全重用 ................................................................................................................. 34 抗抵賴 ............................................................................................................................. 35 區(qū)域邊界安全設(shè)計 .......................................................................................................... 35 邊界訪問控制 ................................................................................................................. 35 邊界完整性檢查 ............................................................................................................. 37 邊界入侵防范 ................................................................................................................. 37 邊界安全審計 ................................................................................................................. 38 邊界惡意代碼防范 ......................................................................................................... 39 通信網(wǎng)絡(luò)安全設(shè)計 .......................................................................................................... 39 網(wǎng)絡(luò)結(jié)構(gòu)安全 ................................................................................................................. 39 網(wǎng)絡(luò)安全審計 ................................................................................................................. 40 網(wǎng)絡(luò)設(shè)備防護(hù) ................................................................................................................. 40 通信完整性 ..................................................................................................................... 41 通信保密性 ..................................................................................................................... 41 網(wǎng)絡(luò)可信接入 ................................................................................................................. 42 安全管理中心設(shè)計 .......................................................................................................... 43 系統(tǒng)管理 ......................................................................................................................... 43 審計管理 ......................................................................................................................... 44 安全管理 ......................................................................................................................... 46 不同等級系統(tǒng)互聯(lián)互通 ................................................................................................. 46 9 安全管理體系設(shè)計 .......................................................................................................................... 47 北醫(yī)三院 等級保護(hù) 方案 4 10 安全運(yùn)維服務(wù)設(shè)計 .......................................................................................................................... 48 安全掃描 .....................................................................................................