信息安全等级保护中Linux服务器测评方法研究
    点此下载全文
引用本文:宋一赞, 谢舟, 谢冬青.信息安全等级保护中Linux服务器测评方法研究[J].计算技术与自动化,2012,(1):140-143
摘要点击次数: 1588
全文下载次数: 144
作者单位
宋一赞, 谢舟, 谢冬青 (1.广州大学 数学与信息科学学院广东 广州5100062. 广州大学 计算机科学与教育软件学院广东 广州510006) 
中文摘要:随着Linux操作系统的发展与完善,不少中小企业用户开始使用搭载Linux操作系统的服务器,但是很多Linux系统服务器安全策略并不完善。为满足国家信息安全等级保护的要求,保护企业信息系统的安全稳定运行,以信息安全等级保护测评的要求为依据,本文提出对Linux系统服务器安全测评的具体操作方法,分别从身份鉴别、访问控制、安全审计、入侵防范与恶意代码防范、资源控制等不同方面依据cat等指令检查系统文件的相关配置,依此配置结果与信息安全等级保护的具体要求做比较以满足测评要求,并提出加强Linux服务器安全策略的方法。
中文关键词:Linux  服务器  测评  安全策略
 
The Research on Evaluation Method for Linux Server in Information Security Level Protection
Abstract:With the development and improvement of Linux operating system, Linux operating system of carrying the server be widely used in mittelstand.But the security strategy of many Linux system servers is not perfect.In order to meet the requirement of national information security level protection, protect the safe and stable operation of the enterprise information system, as the basis of evaluation requirements to Information Security Level Protection,the paper proposed to the the specific operation method of Linux system server security assessment, respectively from the different aspects such as peer-entity authentication, access control, safety audit, intrusion prevention and malicious code to prevent and resource control, according to instruction cat, check related instructions configuration of system file, as the basis of this configuration results compare with the specific evaluation requirements of the information security level protection to meet the requirements, and also proposes strengthening security strategy method of Linux server.
keywords:Linux  server  assessment  security policy
查看全文   查看/发表评论   下载pdf阅读器