https://www.clearsec.org/wikis/ise/ises/04_%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B%E4%B8%8E%E4%BD%93%E7%B3%BB/Recent content in 安全模型与体系 on ClearSec WikiHugozh-cnFri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/04_%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B%E4%B8%8E%E4%BD%93%E7%B3%BB/4.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-blp_biba/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/04_%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B%E4%B8%8E%E4%BD%93%E7%B3%BB/4.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-blp_biba/<p>BLP（机密性）、Biba（完整性） 重点！！！</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/315ea8fce8feb1bd63e9a8d6ee139620_MD5.png" alt=""></p> <h3 id="blp模型-机密性-星上写-简单下读-">BLP模型-机密性-星上写-简单下读-</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/e5e8e4ae9b391397bfc88d06425eb95d_MD5.png" alt=""></p> <p>*特性，”读作星特性“</p> <p>权限大的可以读权限小的，</p> <p>只能下读上写 不能下写</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/6e7a4b994f19951f0f13795e9ad319c7_MD5.png" alt=""></p> <p>安全级、范畴集均满足才能访问。只能下读上写</p> <p>读：安全级别不小于客体，范畴必须包含客体。</p> <p>写：安全级别小于等于客体，范畴集被客体包含。</p> <h3 id="biba模型-上读下写-简单上读-星下写">Biba模型-上读下写-简单上读-星下写</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/4bc54f18340c98be92b811fd2e0d8441_MD5.png" alt=""></p> <p>只能上读下写</p> <p>实线 是写</p> <h3 id="信息流模型fm">信息流模型FM</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/a5d9dcdfbd9f964f0722bfa61602c7d5_MD5.png" alt=""></p> <h3 id="信息保障模型-pdrr-p2dr-wpdrrc">信息保障模型-PDRR-P2DR-WPDRRC</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/45d99a7d40756ce9b13a20bbfd56c9a9_MD5.png" alt=""></p> <h3 id="能力成熟度模型">能力成熟度模型</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/67b3cdfa2cd0f865006898957a01bd9b_MD5.png" alt=""></p> <h3 id="纵深防御模型-分层防护模型-等保模型-网络生存模型">纵深防御模型-分层防护模型-等保模型-网络生存模型</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/3173c371f72fe65d7a200ad7bee8aac6_MD5.png" alt=""></p> <p>网络<strong>生存</strong>模型-抵抗、识别、恢复</p> <h3 id="网络安全原则">网络安全原则</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.1_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B-BLP_Biba/5430bbbb13300f745f651ff09c107e07_MD5.png" alt=""></p>https://www.clearsec.org/wikis/ise/ises/04_%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B%E4%B8%8E%E4%BD%93%E7%B3%BB/4.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/04_%E5%AE%89%E5%85%A8%E6%A8%A1%E5%9E%8B%E4%B8%8E%E4%BD%93%E7%B3%BB/4.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/<h3 id="网络安全体系架构">网络安全体系架构</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/7243076232bfcfec8080debd79a63fd3_MD5.png" alt=""></p> <p>法规是顶层设计，是前提。</p> <p>策略，例如访问控制策略、组织机构策略等</p> <p>科技与产业生态&ndash;安全厂商、科研机构等</p> <p>教育与培训&ndash;网络安全周、大学教育等</p> <p>最后落地需要投入与建设（花钱）</p> <p>运营应急响应与标准规范贯穿始终。</p> <h3 id="网络安全组织架构-领导管理执行外协">网络安全组织架构-领导|管理|执行|外协</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/1b60639e85536b7e72f029f2efa994df_MD5.png" alt=""></p> <h3 id="安全管理">安全管理</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/8a0355e9454969c567de6b84a6145164_MD5.png" alt=""></p> <h3 id="网络安全等级保护20">网络安全等级保护2.0</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/bde1a617a24e712f532494a7d12f4fc9_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/c00e0553c12f75b9ff77b660b3265406_MD5.png" alt=""></p> <p>甲方向公安处提交备案。</p> <p>技术要求：</p> <p>一个中心 安全管理中心</p> <p>三重防护 安全计算环境、安全区域边界、安全通信网络</p> <p>安全物流环境</p> <p>管理要求：</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/2038cb00572ffe26064ce88d629a893d_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/ac9d4a6bbb41397ef3050d1ef06e6e14_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/97bb9ccf504626c11f98750c82959cd9_MD5.png" alt=""></p> <h3 id="智慧城市安全体系应用参考">智慧城市安全体系应用参考</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/746d8643dc0ed2b2a1cedc28b7a7caec_MD5.png" alt=""></p> <p>多维度的安全体系建设</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A74.2_%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E4%BD%93%E7%B3%BB%E4%B8%8E%E5%BB%BA%E8%AE%BE%E5%86%85%E5%AE%B9/38ae5c6e1046fe33cec758f5aef0393f_MD5.png" alt=""></p>