芜湖市社保局信息平安解决方案北京天融信科技2024 年 3 月目 录第一章 工程背景··························4 信息平安严峻形势·······················4 单位职能简介·························5第二章 平安风险分析························6 风险分析方法·························6 网络平安弱点分析·······················7 网络结构脆弱性······················7 系统和应用脆弱性·····················8 网络访问脆弱性······················10 硬件平台脆弱性······················10 管理脆弱性························10 网络平安威胁分析·······················11 威胁来源·························11 非人为的平安威胁·····················12 人为的平安威胁······················12 网络平安风险分析·······················15 物理平安风险·······················15 终端平安风险·······················15 网络平安风险·······················16 系统平安风险·······················17 管理平安风险·······················17第三章 建设需求分析························19 自身平安防护的需求······················19 互联网出口单点故障····················19 对根底防护平台的需求···················20 对统一运维审计平台的需求·················21 对集中平安管理的需求···················21 管理平安的需求······················22 芜湖社保局的符合政策层面的需求················22第四章 整体方案设计························24 方案设计原那么·...
