关键词: 复杂网络安全威胁, 内网安全, 统一准入授权, 安全控制策略, 攻击识别模型

Abstract: Under the background of complex network threats，the construction and improvement of enterprise Intranet security protection capability is imminent. At present, many enterprises still have problems of eradicating the botnet in the Intranet, insufficient ability to resist advanced persistent threat attacks and difficult to defend against network horizontal attacks. This paper analyzes the current complex network threats faced by energy enterprises, and then puts forward models for comprehensive security protection of the Intranet of energy enterprises, such as improving the ability of asset mapping and discovery, establishing an Intranet unified access authorization system, dividing Intranet finegrained Intranet Security Policy, building attack identification models, and system guarantee and expert talent training.

Key words: complex cybersecurity threats, intranet security, unified access authorization, finegrained intranet security policy, attack identification models