中国工程科学2016,Vol.18Issue(6):39-43,5.DOI:10.15302/J-SSCAE-2016.06.008
网络安全审查制度研究及建议
Research on a Cybersecurity Review System with Suggestions
摘要
Abstract
Cybersecurity is part of national security. The rules and regulations for security testing and evaluation are distributed as policies for national security review or cyberspace management. This paper focuses on the current international systems related to cybersecurity review, and analyzes governments’ practices in the aspects of information technology product and service security evaluation, critical information infrastructure security evaluation and management, information and communication technology (ICT) supply chain security, and background security investigation. Based on the above, this paper discusses how to establish a cybersecurity review system in the fields of law and regulation, organization framework, operation mode, review approach, and supporting technology.关键词
网络安全审查/信息技术产品和服务/关键信息基础设施/供应链安全/背景安全Key words
cybersecurity review/information technology product and service/critical information infrastructure/supply chain security/background security分类
信息技术与安全科学引用本文复制引用
陈晓桦,何德全,王海龙,尚燕敏,徐克付..网络安全审查制度研究及建议[J].中国工程科学,2016,18(6):39-43,5.基金项目
中国工程院重大咨询项目“网络空间安全战略研究”(2015-ZD-10) (2015-ZD-10)