Intra-class interconnection security policy management method oriented to classified protection system

Abstract

The invention relates to an intra-class interconnection security policy management method oriented to a classified protection system and belongs to the technical field of computer information security. A global labeling technique is adopted for a subject and an object by the method, and an intra-class interconnection security policy management procedure based on hierarchy includes a processing procedure of an intra-class interconnection security management center to an intra-class interconnection security policy, a processing procedure of a security management center to the intra-class interconnection security policy, and an implementation procedure of a security calculation environment and a security interconnection component to the intra-class interconnection security policy. The intra-class interconnection security policy management method oriented to the classified protection system has the advantages that subject and object labels are unique in a global scope, the implementation requirement on consistency of the intra-class interconnection security policy in the global scope is met, management of the intra-class interconnection security policy has a clear boundary, tasks and processing targets of the intra-class interconnection security management center, the security management center, the security calculation environment and the security interconnection component are clarified, and consistency of a management architecture of the intra-class interconnection security policy and an interconnection architecture of a rating system is guaranteed.

Description

technical field [0001] The invention belongs to the technical field of computer information security, and in particular relates to a cross-level interconnection security policy management method for a hierarchical protection system. Background technique [0002] With the rapid development of computer and network technology, the significance of information resources in the national economy has become more and more important, and its influence has become more and more extensive. In order to better protect information security assets and ensure information security, the management department has carried out work related to information security level protection, formulated relevant policies for construction and rectification work, established three categories of standard systems for technology, management and products, and carried out evaluations at the same time For the construction of the system, standards and norms such as evaluation requirements, evaluation process, and eval...

AI Technical Summary

Problems solved by technology

[0004] At present, there are certain problems in the construction of information system graded protection security. Among them, the most critical is that compared with the relatively complete system of standards and regulations, the implementation process lacks full compliance with graded protection regulations (including "Information Security Graded Protection Legal Policy System") and "National Standard System for Classified Protection of Information Security", etc.), especially in the interconnection of grading systems, there is currently no cross-level interconnection security policy management method that meets the requirements

Images