主办单位:中国气象局沈阳大气环境研究所
国际刊号:ISSN 1673-503X
国内刊号:CN 21-1531/P

气象与环境学报 ›› 2011, Vol. 27 ›› Issue (2): 45-49.doi:

• 简报 • 上一篇    下一篇

气象信息安全建设探讨

窦以文1 刘旭林1 沈波1 刘亚楠1 燕东渭2   

  1. 1.北京市气象局,北京 100089;2.陕西省气象局,陕西 西安 710014
  • 收稿日期:2010-12-13 修回日期:2011-03-02 出版日期:2011-04-30 发布日期:2011-03-02

Discussion on development of meteorological information safety

DOU Yi-wen1 LIU Xu-lin1 SHEN Bo1 LIU Ya-nan1 YAN Dong-wei2   

  1. 1. Beijing Meteorological Bureau, Beijing 100089, China; 2. Shaanxi Provincial Meteorological Bureau, Xi’an 710014, China
  • Received:2010-12-13 Revised:2011-03-02 Online:2011-04-30 Published:2011-03-02

摘要: 为了解决北京气象信息网络安全和有效地满足气象信息共享、等级保护和未来发展的需求,在分析现有北京气象信息网络建设中存在安全风险的基础上,从人员思想意识、管理、技术等方面提出了一套比较完整的解决信息安全问题思路。结果表明:可从信息安全系统建设方面以安全等级划分作为首要切入点,建立安全域,解决办公网、业务网和互联网三网关联问题。将安全检查评估和加固贯穿到信息系统整个周期,采用网络安全联防机制安全准入方案解决VPN接入导致的网络边界模糊问题。可根据信息系统属性和损害客体及损害程度来划分信息系统等级。此研究思路,对气象信息系统安全的进一步发展有参考意义。

关键词: 气象信息, 信息安全发展, 等级保护, 安全策略, 安全域

Abstract: In order to solve the network safety, share, security grade protection and the further needs of Beijing meteorological information, a set of information and network protection solution were proposed from the security idea, management and technology on the basis of the analytical results of the living network safety risk. The results indicate that safety domain should be built in terms of safety grade division in order to solve the network conjunction problem of office network, operational network and Internet. Security evaluation and reinforcement should be run through the total information system. Accessed VPN (Virtual Private Network) terminals causing the dubious network border are restricted by the network security joint defense’s mechanism. Information system is divided into various grades according to its attribute and damaged object as well as damaged extent. This paper provides some good and useful ideas for the customization design and implementation under the complex meteorological network and information security environment conditions.

Key words: Meteorological information, Development of information safety, Grade protection, Security policy, Security domain

中图分类号: