123,123,123

內(nèi)容簡(jiǎn)介

　　本書(shū)主要針對(duì)網(wǎng)絡(luò)安全專業(yè)的從業(yè)者、學(xué)生、愛(ài)好者，概述了網(wǎng)絡(luò)安全應(yīng)急響應(yīng)方面國(guó)外的應(yīng)對(duì)舉措、以及我國(guó)應(yīng)急響應(yīng)體系及機(jī)構(gòu)建設(shè)、法律法規(guī)解讀，并對(duì)應(yīng)急響應(yīng)所涉及的基礎(chǔ)理論和關(guān)鍵技術(shù)進(jìn)行了重點(diǎn)研究及闡釋，幫助從業(yè)人員全面了解國(guó)際國(guó)內(nèi)應(yīng)急響應(yīng)國(guó)家的法律、法規(guī)、行業(yè)標(biāo)準(zhǔn)及規(guī)范、關(guān)鍵技術(shù)原理及應(yīng)用，本書(shū)注重理論闡釋和實(shí)踐在操作相結(jié)合的原則，通過(guò)案例分析和工具使用，一是加強(qiáng)對(duì)理論的理解，同時(shí)也有助于提高讀者的動(dòng)手操作能力。

作者簡(jiǎn)介

　　劉永剛，男，本科畢業(yè)，高級(jí)工程師。1984年10月份入伍，1986年9月至1989年7月于中國(guó)人名解放軍重慶通信學(xué)院學(xué)習(xí)，畢業(yè)后被分配61938部隊(duì)從事網(wǎng)絡(luò)運(yùn)行管理。1992年9月至1996年7月在合肥電子工程學(xué)院學(xué)習(xí)。畢業(yè)后至今，回原單位先后任工程師、訓(xùn)練室主任、分站副站部長(zhǎng)、站長(zhǎng)、高級(jí)工師等職。2007年被評(píng)為總參優(yōu)秀專業(yè)技術(shù)人才，并享受部隊(duì)特殊津貼，現(xiàn)為站專家委員會(huì)委員。

圖書(shū)目錄

第1章網(wǎng)絡(luò)安全應(yīng)急響應(yīng)業(yè)務(wù)的發(fā)展簡(jiǎn)史 ············································.1
1.1 網(wǎng)絡(luò)安全應(yīng)急響應(yīng)業(yè)務(wù)的由來(lái) ·······························································.1
1.2 國(guó)際網(wǎng)絡(luò)安全應(yīng)急響應(yīng)組織的發(fā)展 ·························································.2
1.2.1 FIRST 介紹 ···············································································.2
1.2.2 APCERT 介紹 ············································································.2
1.2.3 國(guó)家級(jí) CERT 情況······································································.2
1.3 我國(guó)網(wǎng)絡(luò)安全應(yīng)急響應(yīng)組織體系的發(fā)展簡(jiǎn)介 ·············································.3
第2章網(wǎng)絡(luò)安全應(yīng)急響應(yīng)概述 ···························································.5
2.1 網(wǎng)絡(luò)安全應(yīng)急響應(yīng)相關(guān)概念 ··································································.5
2.2 網(wǎng)絡(luò)安全與信息安全 ···········································································.5
2.3 產(chǎn)生網(wǎng)絡(luò)安全問(wèn)題的原因分析 ·······························································.6
2.3.1 技術(shù)方面的原因 ·········································································.6
2.3.2 管理方面的原因 ·········································································.8
第3章網(wǎng)絡(luò)安全應(yīng)急響應(yīng)法律法規(guī) ·····················································.9
3.1 我國(guó)網(wǎng)絡(luò)安全應(yīng)急響應(yīng)相關(guān)法律法規(guī)、政策 ·············································.9
3.2 《網(wǎng)絡(luò)安全法》的指導(dǎo)意義 ·································································.10
3.2.1 建立網(wǎng)絡(luò)安全監(jiān)測(cè)預(yù)警和信息通報(bào)制度 ·········································.10
3.2.2 建立網(wǎng)絡(luò)安全風(fēng)險(xiǎn)評(píng)估和應(yīng)急工作機(jī)制 ·········································.11
3.2.3 制定網(wǎng)絡(luò)安全事件應(yīng)急預(yù)案并定期演練 ·········································.12
3.3 《信息安全技術(shù) 信息安全應(yīng)急響應(yīng)計(jì)劃規(guī)范》（GB/T24363—2009） ··················.13
3.3.1 應(yīng)急響應(yīng)需求分析和應(yīng)急響應(yīng)策略的確定 ······································.14
3.3.2 編制應(yīng)急響應(yīng)計(jì)劃文檔 ······························································.14
3.3.3 應(yīng)急響應(yīng)計(jì)劃的測(cè)試、培訓(xùn)、演練 ···············································.14
3.3.4 應(yīng)急響應(yīng)計(jì)劃的管理和維護(hù) ························································.14
3.4 信息安全事件分類分級(jí) ·······································································.15
3.4.1 分類分級(jí)規(guī)范的重要意義 ···························································.15
3.4.2 信息安全事件分類原則 ······························································.16
3.4.3 信息安全事件分級(jí)原則 ······························································.16
第4章網(wǎng)絡(luò)安全應(yīng)急響應(yīng)的常用模型 ················································.18
4.1 網(wǎng)絡(luò)殺傷鏈與反殺傷鏈模型 ·································································.18
4.2 鉆石模型 ··························································································.19
4.3 自適應(yīng)安全框架 ················································································.21
4.4 網(wǎng)絡(luò)安全滑動(dòng)標(biāo)尺模型 ·······································································.22
第5章應(yīng)急響應(yīng)處置流程 ·······························································.24
5.1 準(zhǔn)備階段 ··························································································.24
5.1.1 準(zhǔn)備的目的 ··············································································.24
5.1.2 準(zhǔn)備的實(shí)施 ··············································································.25
5.2 檢測(cè)階段 ··························································································.27
5.2.1 檢測(cè)的目的 ··············································································.27
5.2.2 檢測(cè)的實(shí)施 ··············································································.27
5.3 遏制階段 ··························································································.28
5.3.1 遏制的目的 ··············································································.28
5.3.2 遏制的實(shí)施 ··············································································.29
5.4 根除階段 ··························································································.30
5.4.1 根除的目的 ··············································································.30
5.4.2 根除的實(shí)施 ··············································································.30
5.5 恢復(fù)階段 ··························································································.31
5.5.1 恢復(fù)的目的 ··············································································.31
5.5.2 恢復(fù)的實(shí)施 ········