In this case, what security risks exist in enterprise informatization and how to protect them?
Security risk analysis: There are many causes of network security risks, such as the defects of the network itself (for example, the transmission protocol ignores the importance of security and the complexity of network topology), the loopholes of software systems (for example, the loopholes of Winxp, HS and even security software), and the physical defects of hardware devices (for example, unencrypted links and electromagnetic radiation). Because the popularization of informationization and networking ultimately boils down to the popularization of applications, the security protection of applications is the most important. At present, the security problems that society generally faces are as follows:
1. Confidentiality issues
In the information network, we can only send information to the destination host through the transmission protocol with extremely poor security. Hackers or malicious people can easily intercept or infer useful information, such as consumers' bank accounts, passwords, business secrets of enterprises, etc., through the analysis of information flow and direction, communication frequency and length.
2. Complete question
Even if your information is not stolen in the network, people who are familiar with the transmission information format can completely delete, modify and insert malicious destruction means during the information transmission, resulting in the receiver being unable to read or understand the original file content.
3. The real problem
In the absence of reliable security, if the identity of the other party can be identified, in reality, people often use e-mail or pretend to be leaders to engage in illegal activities such as online fraud and obtaining confidential documents.
4. Non-repudiation
In traditional transactions, we use seals and signatures to ensure the promise effect of both parties, but in the network, denial happens from time to time, for example, the sender denies that he sent a message or content afterwards; The buyer placed an order and refused to acknowledge it; The goods sold by merchants do not recognize the original transaction because of the price difference, and so on.
As a provider of security management solutions, Tsinghua Deshi first began to explore security issues systematically, and successively developed a series of security products such as application security management platform WebST, firewall NetST, Internet content filtering WebCM, and billing gateway NetAT according to the core technology system. A variety of security management mechanisms, such as user management, identity authentication, access control, data encryption, process audit, etc. , has been implemented and integrated, and the security precautions of network layer and application layer have been carefully planned, providing standard, open, cross-platform and network topology-independent security service functions for Internet/Intranet/Extranet network applications.
Strengthening the construction of public security information to serve social and economic development Since the national "Golden Shield Project" was launched in 2003, public security organs at all levels in our city have fully implemented the strategy of strengthening the police through science and technology under the correct leadership of the municipal party committee and the municipal government and under the specific guidance of the superior business departments. According to the overall planning of information construction in Hefei and the deployment of public security organs at higher levels, we have adhered to unified leadership, unified planning and unified standards, adopted practical implementation strategies, and accelerated the construction of the "Golden Shield Project", which has achieved fruitful results. Through the construction of the "Golden Shield Project", the resource sharing was initially realized, the grass-roots police force was saved, and the work efficiency was improved, which played a greater role in maintaining social stability, cracking down on crimes and serving the masses, and provided a strong guarantee for the realization of social stability and rapid economic development in Hefei. At present, the public security information infrastructure in our city has begun to take shape. The main performance is: 1. The first phase of Jindun project will be completed soon, and the business association and informatization will be initially realized. There are 19 application systems in the first phase of Golden Shield Project, and eight resource banks have been built, including population basic information, entry-exit personnel/documents information, key public security units information, illegal personnel information, fugitive information, stolen car information, motor vehicle/driver information and basic information of public security police. At present, five systems such as police geography, major criminal cases and intelligence analysis and judgment have not been built, and the automatic fingerprint identification system needs to be reformed. Second, the application effect of public security informatization construction (1) improved work efficiency and better served the masses. In June 2005, the Municipal Public Security Bureau established a population management information system. All the police stations undertaking household registration management are connected to the internet, and more than 4.6 million permanent residents in the city are included in computer network management, thus realizing the "one-stop" service of household registration and the online migration of urban household registration. People can transfer their accounts at the currently registered police station, saving money. On the basis of establishing the population management information system, the Municipal Public Security Bureau actively reported to the municipal leaders and relevant departments and obtained support, completed the installation and debugging of the software and hardware of the second-generation resident ID card renewal system, and officially started the second-generation resident ID card renewal work on 1 month 1 day, 2006. At this point, * * * has issued about 2 million second-generation resident ID cards, completing more than half of the replacement task, winning the praise of provincial and municipal leaders and the general public. The entry-exit management information system has been established, and the 97 version of passport and the 2000 version of Hong Kong and Macao Pass have been issued successively, which has played an important role in Hefei residents' application for personal passports with ID cards and household registration books, "free travel in Hong Kong and Macao" and foreigners' temporary accommodation registration on demand with ID cards and household registration books. The system realizes real-time automatic comparison with the population information of the municipal bureau, the information of people who are not allowed to leave the country, the information of sensitive people and the information of fugitives all over the country, and is associated with the entry-exit information database of provincial offices, which effectively improves the work efficiency and management level, and achieves real-time, accurate and efficient. The website of the public security government has been established, and columns such as illegal score inquiry, entry and exit management, laws and regulations inquiry, network supervision and management, police consultation telephone, traffic management, police office telephone, fire supervision and management, police office address, public security household administration, and safety technical prevention have been set up. According to the actual needs of the masses, formulate the management system and workflow for handling public security administrative examination and approval matters such as identity cards and driver's licenses, household registration transfer, visas, and security precautions. Citizens can download relevant forms through the Internet and fill them out by themselves. At present, the click-through rate of "Hefei Police Network" website has exceeded 270,000 times, with an average daily click-through rate of over 350 times and a maximum daily click-through rate of 875 times. (2) The means of investigation and solving crimes have been strengthened, which has cracked down on illegal and criminal acts. The Municipal Public Security Bureau has built a fugitive information system, a fingerprint comparison identification system, a comprehensive criminal investigation system and a collaborative case handling system, which has collected a large amount of basic information, improved the quality of law enforcement and case handling, and enhanced the ability to prevent and crack down on crimes. According to incomplete statistics, more than 1500 people were arrested in 2006. (III) Strengthening the ability of public security control and maintaining social stability In order to better maintain social stability and better serve economic development, our bureau has strengthened public security management, built the basic information system of police stations, integrated the management accounts of various basic work of police stations, and concentrated and refined all management work into geographical rooms, real population and real units, which provided an effective platform for frontline police to carry out basic work at the grass-roots level, consolidated the basic work of public security and realized the informationization of basic work. The basic information system of the police station has built a temporary population management system, a rental house system and a hotel security management information system to realize the dynamic management of the floating population. Through the above work, the social security situation in our city has further improved, and the total number of mass incidents has shown a downward trend. Not only did the number of criminal cases decrease, but also the cases of "two robberies and one thief" which affected the people's sense of security declined in different degrees for the first time, and the proportion of people who felt safe and basically safe reached 93.42%. In order to improve the ability of social security control, according to the guiding opinions of the municipal party committee and the municipal government on the construction of urban alarm monitoring system in our city, in accordance with the construction idea of "emphasizing key points, giving consideration to the general, paying attention to actual results, rationally utilizing and integrating resources" and combining the characteristics of social security in our city, the construction of urban alarm monitoring system is based on grass-roots units and based on the principle of "effectiveness". (4) Optimize traffic management and improve the level of traffic management. The Municipal Public Security Bureau has continuously increased investment in traffic science and technology, formed an effective research and application system of traffic science and technology, and effectively improved the level of urban road traffic management. At present, the evaluation level of urban road traffic management in Hefei has reached the second-class management level of B-class cities. Construction of traffic control system, comprehensive use of network video monitoring, highway bayonet monitoring, comprehensive information digital platform and other subsystems, real-time grasp of the traffic conditions of the monitored sections, take the initiative to find and quickly deal with traffic accidents, traffic jams and emergencies, real-time automatic collection and update of vehicle traffic control, traffic accidents and other information to provide accurate data support for leadership decision-making. At the same time, through video surveillance, the police's law enforcement and police reception are inspected and assessed, which further promotes the scientific and standardized road service. (five) to strengthen the content of fire science and technology, improve the ability of fire prevention and disaster relief. According to "Code for Design of Urban Fire Communication System" and relevant requirements of Anhui Fire Corps, a 1 19 command and dispatch system was built, which realized centralized acceptance of fire alarms. Since the system was put into use, it has received about 12600 fire alarms. The construction of urban fire automatic alarm system has been gradually carried out. At present, more than 800 units in the city have installed automatic fire alarm systems, and 30 key fire safety units with automatic fire alarm systems have realized real-time interconnection with the fire brigade. Three. Looking forward to the next step of public security informatization construction, we will continue to accelerate the construction of the "three certificates in one" system that has entered the bidding process according to the principle of "practical and effective", and complete the work of111122 as soon as possible. The command center will be built into an information hub that integrates the functions of calling for help, urban management, social rescue, serving the masses, police complaints, etc., and a nerve center that commands and dispatches major security incidents, forming an emergency mechanism with unified command, sensitive response, orderly coordination and efficient operation, and improving the government's ability to control social security situation, handle emergencies and serve economic and social development. Further improve the working mechanism of information application, take police affairs as the unit, strengthen information sources as the starting point, formulate various information collection and application systems, and combine information collection, maintenance and strengthening basic work at the grassroots level to ensure the integrity, accuracy and timeliness of data. Combine the establishment of information system application working mechanism with the establishment of modern policing mechanism, strive to realize the organic combination of business flow and information flow in public security work, and make information technology an important means to enhance the combat effectiveness of public security organs. Actively study and practice the new tactics of online operations, improve and develop the information application mechanism through actual combat and application, form an integrated information work mode of fighting, prevention and control, and improve the efficiency of police work.
Focusing on public security infrastructure, this paper puts forward the strategic goal of basic work informatization, and systematically discusses it from four aspects: establishing correct ideas, strengthening hardware construction, improving one's own ability and popularizing information application, so as to provide reference for public security infrastructure.