信息安全研究 ›› 2016, Vol. 2 ›› Issue (5): 447-452.

• 技术应用 • 上一篇    下一篇

智慧城市网络安全保障评价体系研究

吕欣   

  1. 国家信息中心
  • 收稿日期:2016-05-17 出版日期:2016-05-15 发布日期:2016-05-17
  • 通讯作者: 吕欣
  • 作者简介:博士,国家信息中心副研究员,主要研究方向为网络安全评价体系、网络安全战略、网络空间安全体系结构. lux@cei.gov.cn

Research on the Evaluation System of Smart City Cyber Security Assurance

Lv Xin   

  1. The Postdoctoral Scientific Research Workstation of State Information Center
  • Received:2016-05-17 Online:2016-05-15 Published:2016-05-17
  • Contact: Lv Xin

摘要: 近年来,我国智慧城市建设取得了积极进展,但也暴露出网络安全隐患,需要建立智慧城市网络安全保障体系,使基础网络和要害信息系统安全可控,重要信息资源安全得到切实保障,居民、企业和政府的信息得到有效保护.认真分析了智慧城市面临的网络安全威胁,基于系统工程方法,提出智慧城市网络安全保障的参考架构,并采用目标层次展开法,从战略规划、管理组织保障、业务运行保障和安全技术保障4个方面构建了一个较为全面、实用的智慧城市网络安全保障评价指标体系,并研究了智慧城市网络安全保障评价过程模型,为提升智慧城市网络安全管理、确保智慧城市网络安全长效性提供方法参考.

关键词: 智慧城市, 网络安全威胁, 网络安全保障, 网络安全评价, 评价指标

Abstract: In recent years, the construction of Chinas smart city has made positive progress, but also exposed the risks of cyber security. Smart city cyber security system needs to be established in order to guarantee the infrastructure network and key information system secure and controlled, critical information resource security effectively protected, residents information, business information and government information effectively protected. In this paper, cyber security threats faced by smart city are analyzed, and the reference architecture of smart city cyber security is proposed based on the system engineering approach. Besides, a comprehensive and practical evaluation system of smart city cyber security assurance is built from aspects of strategic planning, management organization security, business operation support and security technology through the method of targetlevel expansion. Moreover, the process model of smart city cyber security assurance is studied, to enhance cyber security management of smart city and to ensure smart city cyber security providing longterm method reference.

Key words: smart city, cyber security threat, cyber security assurance, cyber security evaluation, evaluation index