Shulou(Shulou.com)06/01 Report--

With the continuous occurrence of information security events, the importance of information security is increasing exponentially. Over the past few years, the number of website attacks, denial of service, credit card information theft, publicly available tools and other events have become increasingly complex, and the losses caused by viruses and worms are incalculable. In the face of such a severe information security situation, many enterprises invest a lot of money to buy security equipment, system software and system services, but often do not get the expected effect of risk management.

Based on years of experience, Shandong Software Evaluation Center has summed up some opinions and methods of information security in planning, construction, operation and maintenance. This issue focuses on the idea of information security, hoping to give you some help.

I. the concept of information security

Information security means that the hardware and software of the information network and the data in the system are protected from being destroyed, changed and leaked by accidental or malicious reasons, the system runs continuously and reliably, and the information service is uninterrupted. Information security mainly includes the following five aspects, that is, it is necessary to ensure the confidentiality, authenticity, integrity, unauthorized copies and the security of the parasitic system.

II. Current situation of information security

Information security and risk management focus on technology rather than management. The managers of most organizations have established varying degrees of security and risk awareness, but the seriousness of information assets is limited to IT security, lack of reasonable information security policies to guide the organization's information security management, static management in security planning, risk, emergency, security education and training, and system evaluation.

In fact, the fundamental measure to solve the problem of information security is to combine the enterprise network and business reality, through the correct method, to establish a set of information security system suitable for the enterprise, and to continue to operate and improve in the enterprise. The following will provide some ideas and methods for enterprises to better deal with information security problems in the process of information construction.

III. The importance of information security

As a kind of resource, information is of great significance for human beings because of its universality, sharing, value-added, processability and versatility. The essence of information security is to protect the information resources in the information system or information network from various types of threats, interference and destruction, that is, to ensure the security of information. According to the definition of the International Organization for Standardization, the meaning of information security mainly refers to the integrity, availability, confidentiality and reliability of information. Information security is an issue that any country, government, department and industry must attach great importance to, and it is a national security strategy that can not be ignored. However, for different departments and industries, their requirements and priorities for information security are different.

China's reform and opening up has brought a sharp increase in the amount of information in all aspects, and requires large-capacity and efficient transmission of this information. In order to adapt to this situation, unprecedented explosive development has taken place in communication technology. In addition to wired communications, shortwave, ultrashort wave, microwave, satellite and other radio communications are also more and more widely used. At the same time, in order to steal China's secret political, military, economic, scientific and technological information, foreign hostile forces have used reconnaissance stations, reconnaissance ships, reconnaissance planes, satellites, and other means to form a three-dimensional reconnaissance network that combines fixed and mobile, long-distance and short-distance, air and ground to intercept information in China's communication transmission.

In the last 50 years of the 20th century, it is becoming easier and easier to learn the inside story of a society from the computer to which it belongs. Both institutions and individuals are entrusting more and more things to computers, sensitive information is being transmitted between computer systems through fragile communication lines, special information is stored in computers or transmitted between computers, electronic banking makes financial accounts accessible through communication lines, law enforcement agencies learn about criminals' criminal records from computers, doctors use computers to manage medical records, all of this. The most important problem is that information cannot be transmitted without guard against illegal (unauthorized) access.

There are many ways to transmit information, including local computer network, Internet and distributed database, cellular wireless, packet-switched wireless, satellite videoconferencing, e-mail and other transmission technologies. In the process of storage, processing and exchange of information, there is the possibility of disclosure or interception, eavesdropping, tampering and forgery. It is not difficult to see that a single security measure has been difficult to ensure the security of communications and information, and all kinds of security measures must be comprehensively applied, that is, through technical, administrative and administrative means to realize the protection of information sources, signals and information. in order to achieve the purpose of secret information security.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.