【正文】 2 目 錄 1 工程項(xiàng)目背景 ......................................................................................................................................6 2 系統(tǒng)分析 ..............................................................................................................................................7 3 等級(jí)保護(hù)建設(shè)流程 .............................................................................................................................8 4 方案參照標(biāo)準(zhǔn) ................................................................................................................................... 10 5 安全區(qū)域框架 ................................................................................................................................... 11 6 安全等級(jí)劃分 ................................................................................................................................... 12 定級(jí)流程 ............................................................................................................................ 12 定級(jí)結(jié)果 ............................................................................................................................ 14 7 安全風(fēng)險(xiǎn)與需求分析 ..................................................................................................................... 15 安全技術(shù)需求分析 .................................................................................................................... 15 物理安全風(fēng)險(xiǎn)與需求分析 ............................................................................................ 15 計(jì)算環(huán)境安全風(fēng)險(xiǎn)與需求分析 .................................................................................... 15 區(qū)域邊界安全風(fēng)險(xiǎn)與需求分析 .................................................................................... 18 通信網(wǎng)絡(luò)安全風(fēng)險(xiǎn)與需求分析 .................................................................................... 19 安全管理需求分析 .................................................................................................................... 21 8 技術(shù)體系方案設(shè)計(jì) .......................................................................................................................... 22 方案設(shè)計(jì)目標(biāo) ............................................................................................................................. 22 方案設(shè)計(jì)框架 ............................................................................................................................. 22 安全技術(shù)體系設(shè)計(jì) .................................................................................................................... 25 物理安全設(shè)計(jì) ................................................................................................................... 25 計(jì)算環(huán)境安全設(shè)計(jì) .......................................................................................................... 26 身份鑒別 ......................................................................................................................... 26 訪問控制 ......................................................................................................................... 27 系統(tǒng)安全審計(jì) ................................................................................................................. 28 北醫(yī)三院 等級(jí)保護(hù) 方案 3 入侵防范 ......................................................................................................................... 29 主機(jī)惡意代碼防范 ......................................................................................................... 30 軟件容錯(cuò) ......................................................................................................................... 31 數(shù)據(jù)完整性與保密性 ..................................................................................................... 31 備份與恢復(fù) ..................................................................................................................... 33 資源控制 ......................................................................................................................... 33 客體安全重用 ................................................................................................................. 34 抗抵賴 ............................................................................................................................. 35 區(qū)域邊界安全設(shè)計(jì) .......................................................................................................... 35 邊界訪問控制 ................................................................................................................. 35 邊界完整性檢查 ............................................................................................................. 37 邊界入侵防范 ................................................................................................................. 37 邊界安全審計(jì) ................................................................................................................. 38 邊界惡意代碼防范 ......................................................................................................... 39 通信網(wǎng)絡(luò)安全設(shè)計(jì) .......................................................................................................... 39 網(wǎng)絡(luò)結(jié)構(gòu)安全 ................................................................................................................. 39 網(wǎng)絡(luò)安全審計(jì) ................................................................................................................. 40 網(wǎng)絡(luò)設(shè)備防護(hù) ................................................................................................................. 40 通信完整性 ..................................................................................................................... 41 通信保密性 ..................................................................................................................... 41 網(wǎng)絡(luò)可信接入 ................................................................................................................. 42 安全管