https://www.clearsec.org/wikis/ise/ises/16_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0/Recent content in 风险评估 on ClearSec WikiHugozh-cnFri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/16_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0/16.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/16_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0/16.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/<h3 id="网络安全风险评估概述">网络安全风险评估概述</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/3c99b6c235ea89fd117c09db2c04e258_MD5.png" alt=""></p> <p>资产、威胁、脆弱性、安全措施、风险……</p> <h3 id="网络安全风险评估工作基本过程">网络安全风险评估工作基本过程</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/f364df2a870fa1a72ac59dd8a24f5780_MD5.png" alt=""></p> <p>范围必须先确定好，否则可能面临需求的无限扩大。</p> <h4 id="评估准备资产识别">评估准备、资产识别</h4> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/b5c81a647983a7885a72df2faead3ded_MD5.png" alt=""></p> <p>👆保密性赋值</p> <p>价值不是资产的实际售价，而是遭受保密性、完整性和可用性损害之后对信息系统造成的损失。</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/d1533b34ecd258bc2503b8f7bd5f2abd_MD5.png" alt=""></p> <p>评估准备后资产识别，</p> <h4 id="威胁识别">威胁识别</h4> <p>然后是威胁识别-自然威胁和人为威胁。</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/d0951b1a46b20019904d24667246e36c_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/c6ed4522880c4618b978cb106242a3a7_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/847024a953514b2ed7759f88a1af00c7_MD5.png" alt=""></p> <p>非法访问 读 破坏机密性 写 破坏完整性</p> <p>拒绝服务 破坏可用性</p> <p>欺骗 破坏可控性</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/7ab3aea2fd47c1d8c60f0b352d570773_MD5.png" alt=""></p> <h4 id="脆弱性识别">脆弱性识别</h4> <p>脆弱性识别 以资产为核心</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/2bbf457a179d16d785a8b36750451282_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/1b24074e8a8b6b009942cbe08cdbec37_MD5.png" alt=""></p> <h4 id="已有网络安全措施分析">已有网络安全措施分析</h4> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/1714b12c4b6001d5217ddc2c2567efa1_MD5.png" alt=""></p> <h4 id="网络安全风险分析">网络安全风险分析</h4> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/03fbe515e1a8132ee606098215c75744_MD5.png" alt=""></p> <p>定性 低、中、高危</p> <p>定量 12345分</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/acaf048b2498ec4179dfb45a4469c523_MD5.png" alt="">、<img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/8f09744fc32da3da4e5dc6ddcd453473_MD5.png" alt=""></p> <h4 id="风险处置与管理">风险处置与管理</h4> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.1_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E5%B7%A5%E4%BD%9C%E5%9F%BA%E6%9C%AC%E8%BF%87%E7%A8%8B/05bf11a93513be38183d522eb4d2192f_MD5.png" alt=""></p> <p><strong>安全风险管理的控制措施，背等保的内容就行。</strong></p> <p><strong>制订安全策略建立安全组织（团队）、资产分类、加强人员管理、保证物理和环境安全、加强通信安全运行、采取访问控制机制、进行安全系统开发与维护、保证业务持续运行、遵守法律法规、安全目标一致性检查。</strong></p> <p>安全管理制度</p> <p>安全管理人员</p> <p>安全管理机构</p> <p>安全运维管理</p> <p>安全建设管理</p>https://www.clearsec.org/wikis/ise/ises/16_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0/16.2_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E6%8A%80%E6%9C%AF%E4%B8%8E%E5%B7%A5%E5%85%B7/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/16_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0/16.2_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E6%8A%80%E6%9C%AF%E4%B8%8E%E5%B7%A5%E5%85%B7/<p>使用调查表进行资产收集</p> <p>使用工具发现网络资产（拓扑发现不是漏扫）</p> <p>使用漏扫收集脆弱性信息</p> <p><strong>人工检查</strong>，设计好检查表，核对检查项（类似等保的记录表）</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.2_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E6%8A%80%E6%9C%AF%E4%B8%8E%E5%B7%A5%E5%85%B7/12b61896944cbf7d59a2c65ecf4ba0ce_MD5.png" alt=""></p> <p>渗透测试 ⭐ 模拟黑客攻击网络系统</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.2_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E6%8A%80%E6%9C%AF%E4%B8%8E%E5%B7%A5%E5%85%B7/08ff2b8d92050cbb20083790494080a9_MD5.png" alt=""></p>https://www.clearsec.org/wikis/ise/ises/16_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0/16.3_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E9%A1%B9%E7%9B%AE%E6%B5%81%E7%A8%8B%E5%86%85%E5%AE%B9%E5%92%8C%E5%BA%94%E7%94%A8/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/16_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0/16.3_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E9%A1%B9%E7%9B%AE%E6%B5%81%E7%A8%8B%E5%86%85%E5%AE%B9%E5%92%8C%E5%BA%94%E7%94%A8/<h3 id="风评项目工作流程">风评项目工作流程</h3> <p>前期准备、方案设计论证、方案实施、报告攥写、结果评审与认可</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.3_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E9%A1%B9%E7%9B%AE%E6%B5%81%E7%A8%8B%E3%80%81%E5%86%85%E5%AE%B9%E5%92%8C%E5%BA%94%E7%94%A8/1dffdf5941931e59926a66b7d7f4fe8b_MD5.png" alt=""></p> <p>评估实施过程中不要更改设置或备份系统数据配置，参加实施需要获得授权并经领导签字。</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.3_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E9%A1%B9%E7%9B%AE%E6%B5%81%E7%A8%8B%E3%80%81%E5%86%85%E5%AE%B9%E5%92%8C%E5%BA%94%E7%94%A8/35be5890a8b064c64d5c0e52a5bab0df_MD5.png" alt=""></p> <h3 id="ict供应链安全威胁识别">ICT供应链安全威胁识别</h3> <p>ict-信息与通信技术</p> <p>华为就是供应链不可控，被别人断供了不是。</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.3_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E9%A1%B9%E7%9B%AE%E6%B5%81%E7%A8%8B%E3%80%81%E5%86%85%E5%AE%B9%E5%92%8C%E5%BA%94%E7%94%A8/6b17bdb86dab90691d7474fd8640fb12_MD5.png" alt=""></p> <h3 id="人工智能安全风险分析">人工智能安全风险分析</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A716.3_%E9%A3%8E%E9%99%A9%E8%AF%84%E4%BC%B0%E9%A1%B9%E7%9B%AE%E6%B5%81%E7%A8%8B%E3%80%81%E5%86%85%E5%AE%B9%E5%92%8C%E5%BA%94%E7%94%A8/b4069b5f0a16c5857fc5aa31c367f1a7_MD5.png" alt=""></p>