计算机应急响应系统体系研究

应急响应是维护计算机和网络系统动态安全性的关键问题.提出了基于层次化模型的计算机应急响应系统体系结构,从安全服务层、系统模块层、安全研究层的角度对系统的功能需求、模块划分和相应的技术支持给出了明确的定义,针对计算机应急响应系统所关注的事件响应、安全监控、入侵追踪、灾难恢复等问题,结合向用户提供的安全咨询、安全公告、安全状况分析等服务功能,进行了详细的阐述.

Study on the Architecture of Computer Emergency Response System

Emergency Response is regarded as the key problem of dynamic security of computer and network systems.In this paper, we propose the architecture of Computer Emergency Response System based on hierarchicalmodel, including security service layer, system module layer and security research layer. Explicit definitions offunctional requirements, module partitions and corresponding technical supports of this architecture are given. Severalconcerned items, such as Incident Response, Security Surveillance, Intrusion Traceback, Disaster Recovery,and other relevant security services (Security Consultation, Security Bulletin and Security Analysis),are also discussedin detail.