政府Web应用安全建设浅析

从政府Web应用系统运营者的考虑角度,专门针对政府Web应用特定业务应用的原有被动式安全防御建设基础上,提出在贯穿网站全生命周期的信息安全建设过程中,从事前检测防御、事中应急响应以及事后恢复三个方面对政府网站信息安全体系的完善。将政府网站安全需求转化为更加主动的防御技术,使各级政府网站具备一定的对抗能力和应急恢复能力。

Analysis on Governmental Web Application Security Building

From the perspective of a telecom carrier engaged in governmental Web application systems,this paper provides a lifecycle solution in security building that can perfectly improve the existing passive protection for particular businesses in governmental Web applications.This solution contains detection before events,emergency response during events and recovery after events,based on which the security requirements are switched to active prevention techniques,efficiently endowed the portals of governments at all levels with capability of attack prevention and disaster recovery.