【摘要】 随着教育信息化的快速发展,高校面临的信息孤岛严重、信息系统繁杂、安全意识薄弱等问题日趋严重,如何做好信息安全漏洞和威胁管理已成为信息化建设部门关注的焦点。为此,通过分析教育行业信息安全面临的难点问题,提出高校信息安全漏洞和威胁管理的具体需求,结合P2DR模型和高校信息系统生命周期安全管理,开展高校资产稽查实践、漏洞管理实践和威胁管理实践,形成一套智能闭环可持续运维的高校信息安全漏洞和威胁管理体系,以期对高校信息安全漏洞和威胁管理实践工作提供借鉴。更多还原

【Abstract】 With the rapid development of education informatization,the problem of serious information isolation,complex information system and weak security awareness in universities is becoming more and more serious. How to do well in information security and threat management has become the focus of information technology department. By analyzing the difficult problems in the information security of the education industry,this paper puts forward the specific needs of the information security loopholes and threat management in universities. Combining the P2 DR model and the life cycle safety management of the university information system,the practice of asset audit,the practice of loophole management and the practice of threat management are carried out,and a set of Intelligent closed loop sustainable operation and maintenance university information security vulnerabilities and threat management system can be formed. It has a very high reference value of information security loopholes and threat management practice in universities.更多还原