长江委网络安全集中管控平台建设与应用

Construction and application of centralized cybersecurity control platform for Yangtze River Commission

摘要:

为落实网络安全相关法律法规，提升长江委网络安全防护与管理水平，解决长江委网络安全运维中网络资产不明确、安全设备管理分散、安全策略实施效率低、安全威胁处置响应不够及时、运维体量大等难点和痛点问题，研究应用策略智能适配、安全策略分析模式创新和机器人流程自动化等关键技术，构建由 IT 资产管理、运行维护监控、安全策略管理、安全事件处置和安全知识等中心组成的长江委网络安全集中管控平台。通过在长江委机关网及部分下属单位网络部署运行管控平台，初步实现长江委网络资源和用户的统一监控、访问控制策略的统一管理、网络安全事件的统一分析、网络安全威胁的统一响应，整体提升长江委网络安全纵深防御、监测预警和应急处置能力。

Abstract:

In order to comply with cybersecurity laws and regulations and to enhance the cybersecurity protection and management level of the Yangtze River Commission （YRC），this study addresses various problems faced in the network operation and maintenance of the YRC，including unclear network asset management，decentralized security device management，low effi ciency of security policy implementation，delayed response to security threats，and large operational scale. Key technologies such as intelligent policy adaptation，security policy analysis model innovation， and robotic process automation have been researched and applied to construct a centralized cybersecurity control platform consisting of IT asset management，operational maintenance monitoring，security policy management， security incident response，and security knowledge management. By deploying and operating the control platform on the YRC's internal network and some subordinate units，a preliminary unifi ed monitoring of network resources and users has been achieved，along with centralized management of access control policies，unified analysis of cybersecurity incidents，and coordinated response to cybersecurity threats. This initiative signifi cantly enhances the YRC's capabilities in cybersecurity defense，monitoring and early warning，and emergency response.