随着水利信息化的发展,长江科学院持续加强信息化建设,给水利科学研究和科研管理带来极大的便利;但信息化带来便捷的同时,安全问题也开始逐渐显现。深入分析网络中的各个薄弱环节,提高整体网络安全性,避免发生网络安全事件已成为工作的重点。基于长江科学院的实际网络及业务情况,围绕长江科学院网络安全建设的内容进行探讨,从网络边界、内部网络、内部态势感知3个方面详细分析了长江科学院在目前网络环境下面临的安全风险;并从边界防护、终端防护、服务器防护、态势感知4个方面提出应对策略,阐述了可实施的网络安全技术路线。

With the development of water conservancy informatization, Yangtze River Scientific Research Institute continues to strengthen internet technology IT application, which brings great convenience to hydro-science research and its management. Notwithstanding its convenience, IT application also raises some security issues with time passing by. At present, to examine each weak link of the network, to improve the overall network security and to avoid network security events have become the focus of work. In line with the actual network and business conditions of Yangtze River Scientific Research Institute, we discussed the content of network security construction of Yangtze River Scientific Research Institute by analyzing its current security risks from three aspects: network boundary, internal network and internal situation awareness. Furthermore, we proposed countermeasures from four aspects of boundary protection, terminal protection, server protection and situational awareness, and expounded the network security technical routes that can be implemented.