本书系统介绍网络安全实践技术的层次模型和各层面的安全实验。共分5章。主要通过网络入侵、网络防护以及MOOE在线实验三个维度进行网络安全知识讲解。网络入侵主要包括Metasploit攻击、扫描攻击、木马技术、特权提升、病毒技术、网络资源消耗类攻击等实验。网络防护主要包括防火墙实验、入侵检测与防御实验、防病毒软件实验、安全防御工具实验、安全检测工具实验等。MOOE是通过线上实验，进行网络入侵与网络防护
电子书
内容简介
This book introduces the China Cybersecurity Classified Protection System (CCPS), covering its development, interpretation of the Cybersecurity Law of the People’s Republic of China, the underlying standards, and procedures in practice such as cybersecurity system classification level determination, registration, development and improvement, evaluation, supervision and inspection.In this book, we analyze the implementation and practice of cybersecurity protection in China, and provide an interpretation of the existing cybersecurity related laws, regulations and standards. The purpose of this book is to serve the training and implementation needs of foreign organizations, including companies along the Belt and Road Initiatives, in establishing their cybersecurity protection in line with the requirements of China Cybersecurity Classified Protection System.
章节目录
- Part ⅠInterpretation of CybersecurityClassified Protection Systemof China
- Chapter 1 Development of China CybersecurityClassified Protection System
- 1.1 Establishment of Computer Information Systems Security Protection System
- 1.2 Establishment of Information Security Classified Protection System
- 1.3 Establishment of Cybersecurity Classified Protection System
- Chapter 2 Interpretation of the Cybersecurity Law
- 2.1 Cybersecurity Obligations and Primary Tasks
- 2.2 Division of Responsibilities and Related Obligations
- 2.3 National Cybersecurity Classified Protection System
- 2.4 Basic Responsibilities and Obligations of Network Operators
- 2.5 Operation Security of Critical Information Infrastructure
- 2.6 Network Data and Information Security
- 2.7 Monitoring, Early Warning, and Emergency Response
- 2.8 Acts Prohibited and Legal Responsibility
- Chapter 3 Interpretation of Cybersecurity Classified Protection System of China
- 3.1 Policies on Cybersecurity Classified Protection
- 3.1.1 General Policy Documents
- 3.1.2 Policy Document of Classified Protection Specific Stages
- 3.2 Basic Concept of Cybersecurity Classified Protection
- 3.2.1 Legal Basis for Carrying Out Cybersecurity Classified Protection
- 3.2.2 Policy Basis for Carrying Out Cybersecurity Classified Protection
- 3.2.3 What is Cybersecurity Classified Protection
- 3.2.4 Division and Supervision of Security Protection Levels
- 3.2.5 Critical Information Infrastructure Protection
- 3.3 Main Contents of the Cybersecurity Classified Protection System
- 3.3.1 Organization Structure of Cybersecurity Classified Protection
- 3.3.2 Main Stages and Basic Requirements of Classified Protection
- 3.3.3 Security Management of Evaluation
- 3.3.4 Network Products and Security Service Requirements
- 3.3.5 Monitoring, Early Warning and Information Reporting
- 3.3.6 Data Security Protection
- 3.3.7 Emergency Disposal Requirements
- 3.3.8 Evaluation Requirements
- 3.3.9 Risk Control of New Technology and New Application
- 3.3.10 Supervision and Administration of Cybersecurity Classified Protection Practices
- Chapter 4 Interpretation of Cybersecurity Classified Protection Standards of China
- 4.1 Cybersecurity Classified Protection Standards Framework
- 4.2 Relationship between Relevant Standards and Different Stages ofClassified Protection
- 4.2.1 Basic Standards
- 4.2.2 Classification
- 4.2.3 Security Requirements
- 4.2.4 Methodology and Guidance
- 4.2.5 Status Analysis
- 4.3 Issues Need Attentions for the Application of Relevant Standards
- 4.4 Brief Description of Main Standards on Cybersecurity Classified Protection
- 4.4.1 Classified Criteria for Security Protection of Computer Information System (GB 17859—1999)
- 4.4.2 Implementation Guide for Classified Protection of Cybersecurity (GB/T 25058—2019)
- 4.4.3 Testing and Evaluation Process Guide for Classified Protection of Cybersecurity (GB/T 28449—2018)
- Part ⅡImplementation of CybersecurityClassified Protection System of China
- Chapter 5 Classification of Cybersecurity Classified Protection
- 5.1 Classification of Security Protection Levels
- 5.1.1 Principle of Classification
- 5.1.2 Security Protection Levels of Network
- 5.1.3 Classification Factors of Cybersecurity Protection Level
- 5.1.4 Protection and Supervision of the Five Levels
- 5.2 Procedures of Classification
- 5.2.1 Determine the Classification Object
- 5.2.2 Determine the Security Protection Level of Network
- 5.2.3 Expert Reviews of Cybersecurity Protection Level
- 5.2.4 Examination of Cybersecurity Protection Level
- 5.2.5 Public Security Authorities Examine the Security Protection Level of Network
- 5.3 How to Determine the Security Protection Level of Network
- 5.3.1 How to Understand the Five Security Protection Levels of Network
- 5.3.2 General Process of Network Classification
- Chapter 6 Registration of CybersecurityClassified Protection
- 6.1 Registration and Acceptance
- 6.2 Public Security Authorities Accept Network Registration
- 6.3 Treatment for Inaccurate Level and Non-registration
- 6.4 Public Security Authorities’ Guidance on Network Classification and Registration
- Chapter 7 Development and Improvement ofCybersecurity Classified Protection
- 7.1 Objective and Content
- 7.1.1 Objective
- 7.1.2 Scope and Characteristics
- 7.1.3 Contents
- 7.1.4 Cybersecurity Protection Capability Objective
- 7.2 Methods and Processes
- 7.2.1 Methods
- 7.2.2 Processes
- 7.3 Security Management System Development
- 7.3.1 Implementing Cybersecurity Responsibility System
- 7.3.2 Cybersecurity Management Status Analysis
- 7.3.3 Formulating Security Management Strategy and System
- 7.3.4 Conducting Security Management Measures
- 7.3.5 Security Self-Inspection and Adjustment
- 7.4 Security Technology Measures Development
- 7.4.1 Security Protection Technology Status Analysis of Network
- 7.4.2 Designing of Cybersecurity Technology Development and Improvement Plan
- 7.4.3 Implementation and Management of Security Development and Improvement Engineering
- 7.4.4 Elements of Cybersecurity Development and Improvement Plan
- 7.5 Selection and Use of Information Security Products
- 7.5.1 Selecting the Information Security Products Licensed for Sale
- 7.5.2 Multilevel Testing and Use of Products
- 7.5.3 Issues Related to Information Security Products Used in Networks at or Above LevelⅢ
- 7.5.4 Issues Related to the Commercial Cryptography Products Used in Networks ator above Level Ⅲ
- 7.6 Selecting the Development Service Organization of CybersecurityClassified Protection
- Chapter 8 Level Evaluation of CybersecurityClassified Protection
- 8.1 Overview of Level Evaluation
- 8.1.1 Basic Connotation of Level Evaluation
- 8.1.2 Goals of Level Evaluation
- 8.1.3 When Should We Carry Out Level Evaluation
- 8.1.4 Business Scope of Level Evaluation Organizations
- 8.1.5 Standards of Level Evaluation
- 8.1.6 Development of Level Evaluation Business
- 8.1.7 Notes on the Application of Level Evaluation Standards
- 8.2 Management and Supervision of Level Evaluation Organizations and Personnel
- 8.2.1 Why Need to Develop the Level Evaluation System
- 8.2.2 Management of Evaluation Organizations and Personnel
- 8.2.3 Business Scope and Work Requirements of Evaluation Organizations
- 8.3 Risk Control of Level Evaluation
- 8.3.1 Existing Risks
- 8.3.2 Risk Aversion
- 8.4 Evaluation Reports
- Chapter 9 Supervision and Inspection ofCybersecurity Classified Protection
- 9.1 Regular Self-Inspection and Supervision
- 9.1.1 Regular Self-inspection of Registration Organizations
- 9.1.2 Supervision and Inspection of Industry Competent Departments
- 9.2 Supervision and Inspection of Public Security Authorities
- 9.2.1 Principles and Methods
- 9.2.2 Main Contents of Inspection
- 9.2.3 Inspection and Improvement Requirements
- 9.2.4 Inspection Requirements
- 9.2.5 Incidents Investigation
- 9.3 Supervision and Management of Network Service Providers
- Part ⅢAppendices
- Appendix ACybersecurity Law of the People’s Republic of China
- Appendix BThe Cryptography Law of the People’s Republic of China
- Appendix CRegulations of the People’s Republic of Chinaon the Protection of Computer InformationSystem Security
- Appendix DAdministration Measures for Information SecurityClassified Protection
- Appendix ERegulations for the Cybersecurity Classified Protection
- Appendix FSpecifications on Information Security ClassifiedProtection Inspection of Public SecurityAuthorities (Trial)
- Appendix GAdministration Measures for Cybersecurity Classified Protection Evaluation Organizations
- Appendix HInterpretation of Classification Guide for Classified Protection of Cybersecurity (GB/T 22240—2020)
- Appendix IInterpretation of Baseline for Classified Protection of Cybersecurity (GB/T 22239—2019)
- Appendix JInterpretation of Technical Requirements ofSecurity Design for Classified Protection ofCybersecurity (GB/T 25070—2019)
- Appendix KInterpretation of Evaluation Requirement for Classified Protection of Cybersecurity (GB/T 28448—2019)
- Glossary of Classified Protection Terms
展开全部
中国网络安全等级保护制度理解与实施（英文版）是2021年由人民邮电出版社出版,作者Guo Qiquan 主编。
温馨提示：
1.本电子书已获得正版授权，由出版社通过知传链发行。
2.该电子书为虚拟物品，付费之后概不接收任何理由退款。电子书内容仅支持在线阅读，不支持下载。
3.您在本站购买的阅读使用权仅限于您本人阅读使用，您不得/不能给任何第三方使用，由此造成的一切相关后果本平台保留向您追偿索赔的权利！版权所有，后果自负！
得书感谢您对《中国网络安全等级保护制度理解与实施（英文版）》关注和支持，如本书内容有不良信息或侵权等情形的，请联系本网站。
电子书
电子书
本书系统介绍网络安全的基本理论和关键技术，共分三部分14章。其中，第一部分是基础技术，介绍网络安全现状、密码技术、身份认证、访问控制、网络攻击等；第二部分是中级防护，介绍系统安全、反恶意代码、网络边界安全、网络服务安全、网络信息内容安全等；第三部分是高级进阶，介绍云计算、大数据、物联网、工控网等网络安全。本书旨在为全国网信干部提供理论指南、实践指导和趋势指引，也可以作为网络与信息安全技术学习、研究
电子书
本书分四部分共10章内容。其中，第一部分（第1章、第2章）介绍信息安全测评思想和方法；第二部分（第3章～第5章）介绍安全测评的主要技术和实施流程；第三部分（第6章～第8章）介绍威胁识别、脆弱性识别及风险分析等；第四部分（第9章、第10章）介绍具体安全测评案例以及国内外该领域的最新进展。本书旨在为全国网信干部提供理论指南、实践指导和趋势指引，也可以作为从事网络安全测评研究、实践和管理等各类专业人士的
电子书
本书梳理了作者多年来在网络安全前沿技术研究和关键系统设计中总结的经验与形成的观点。本书首先通过大量实例，解释威胁为何经常防不住；再将网络安全与其他学科类比，证明网络安全是一门科学，安全对抗中有制胜的理论基础；随后，从问题的角度出发，揭示安全之道是业务确定性而非威胁驱动，安全之法是OODA（观察—判断—决策—行动）循环而非防御，安全之术是韧性架构而非威胁防御体系；最后通过安全之用，介绍韧性方案的安全
电子书
本书立足网络安全理论与实战的前沿，分别从网络安全的产业变革、网络空间、5G与安全、行业建设、安全运营、安全教育、数据安全、高级威胁、云上安全、研究前哨、电子取证等角度为读者解析2019年全球网络安全的发展状态和趋势。
电子书
《信息安全等级保护测评与整改指导手册》结合作者近二十年在信息安全领域的工作经历，以等级保护政策为核心，以技术和应用为根本出发点，以理论加实践的方式深度剖析了等级保护的基本概念、准备阶段、定级备案、评估测评、规划执行等内容，向读者进行了系统化的介绍。通过理论与案例讲解相结合，对等级保护在具体客户领域的测评以及规划执行等进行了关联阐述，重点是结合技术与应用实践来对其中涉及的理论、应用领域、应用实效等进
电子书
本书共有7章，分别为广域智能控制保护系统概述、广域智能控制保护系统的信息交互技术、基于广域信息的快速后备保护技术、基于广域信息的快速自愈控制技术、电网广域智能控制保护系统构成方案、广域智能控制保护系统的工程应用实例、总结与展望。
电子书
本书由中央网信办网络法治局组织编写，书中收录了与网信工作密切相关的法律文件78部。其中，法律22部，行政法规6部，部门规章24部，管理规定26件。在法律文件的选取和编排方面，采取与网信工作的相关性为主，颁布时间为辅的原则，以突出汇编的实用性和针对性。本书所收录的法律文件截止时间为2022年12月底。作为网络普法宣传教育的普及读本，希望本书可以为广大网信系统干部学法用法提供帮助，为网信部门领导干部依
