IT基准安全防护介绍.pptVIP

 Contents Introduction IT Security Process IT Structure Analysis IT Baseline Protection Modeling Brief Outline of Existing Modules Introduction The IT Baseline Protection Manual contains standard security safeguards, implementation advice and aids for numerous IT configurations which are typically found in IT systems today. This information is intended to assist with the rapid solution of common s???? IT Security Process Develop an IT security policy Select and establish an appropriate organizational structure for IT security management Creation of an IT security concept Implement the IT security safeguards Training and security awareness Maintain IT security in ongoing operations IT Structure Analysis The existing infrastructure The underlying organizational and personnel situation which forms a background to the use of the IT assets The IT systems used, both networked and non-networked The communication links between the IT systems and with the outside world The IT applications run on the IT assets IT Structure Analysis — Sub-task Preparing a network plan Reducing complexity by identifying groups of similar assets Collecting information about the IT systems Capturing information about the IT applications and related information Analysis of A Network Plan IT system, i.e. clients and server computers, active network components (such as hubs, switches, routers), network printers etc. Network connections between these systems, i.e. LAN connections (e.g. ethernet, token ring), backbone technologies (e.g. FDDI, ATM), etc. Connections between the are under consideration and the outside world, i.e. dial-in access over ISDN or modem, Internet connections using ISDN, modem or routers, radio links or leased lines to remote buildings or sites. Objects Represented for Each IT System A unique name (for example the full host name or an identification number) Type and function (for example, database server for application X) The underlying platform (i.e. hardware platform