湖北快3

EN
您当前的位置: 湖北快3 - 网络安全 - 通告和预警 - 正文

美国国土安全部发布《物联网安全指导原则》

时间:2016-12-14 阅读: 我要纠错


物联网在内的网络互联服务为社会发展创造了机会和利益,而物联网自身的安全却跟不上创新和部署的快速步伐。如今,网络连接设备无处不在,物联网的增长和普及大大方便了人们的生活,而随着国家关键基础设施更多的网络物联应用,个人和国家面临的安全威胁越来越严重,而物联网的安全问题也接踵而来,恶意攻击、信息泄露、业务中断、大规模网络攻击……网络驱动生活,物联网安全事关国家安全。

本报告向物联网设备和系统相关开发商、生产商、管理者及个人提供了一组安全规则建议,以供参考。

1 在设计开发阶段考虑安全问题

湖北快3renhewangluolianjieshebeidouyingkaolvanquanwenti,zaishejijieduandeanquanjianshe,bimianlehouqiyinanquanwentidailaideqianzaiyewuzhongduanhegaoangzhongjianchengben。ertongguozhuzhongwangluoshebeianquanxing,yenengweishengchanshanghefuwushangtigongshichangfenhuajiyu。jianyi: 

yidutedefangshishezhinanyipojiedemorenyonghumingmima。yonghuconglaibuhuixiugaiyoushengchanshangtigongdemorenyonghumingmima,henrongyibeipojie。jiangshiwangluocaozuozhezhengshiliyongzheixiemorenmimaxinxisaomiaoiotshebei,jinxinggongjiganran。dangran,qiangzhuangdeanquankongzhiyinggaishirangyonghujuyouxiugaijinyongmouxiegongnengdequanxian。 

湖北快3shiyongjishuguoguanhejingjikexingdezhuliucaozuoxitong。xuduoiotshebeineizhishiyongleyixielaobanbendelinuxxitong,zaochenggengxinbujishi,dailaiyanzhonganquanyinhuan。 

shiyonganquanjichengyingjianyijiaqiangshebeiheanquanhewanzhengxingfanghu。liru,zaichuliqizhongqianruanquanjichengxinpian,bingtigongjiamiheniminggongneng。 

zaishejizhongkaolvxitonghecaozuozhongduanyinsu。zhiyoulejiezaochengshebeiguzhangdeyuanyin,cainengzhidingyouxiaodeanquancelve,shenzhizaimouxiekexingqingkuangxia,weilejianhuanguzhangdeyanzhongxing,kaifashangyinggaiweishebeishejiyizhonganquanwusundeshixiaomoshi。 

2 加强安全更新和漏洞管理

湖北快3jishizaishejijieduankaolvleanquanxing,danzaichanpinshiyonghouhaishihuifaxianyixieloudong,zheixieloudongkeyitongguogengxinheloudongguanlicelvelaijinxinghuanjie。duiyuzheixiehuanjiecelvedezhidingzhelaishuo,yinggaichongfenkaolvshebeiguzhangzaochengdeyingxiang、shebeiyunxingchixuxingheyuqiweixiuchengben。erduiyushengchanshanglaishuo,zailoudongweixieriquyanzhongdewangluohuanjingzhong,ruguomeiyoubushuhuoshezhianquangengxinnengli,kenengjiuhuimianduiangguidizhaohuihuozaiyiqibuguandexuanze。jianyi: 

kaolvtongguowangluohuoqitazidonghuafangshiduishebeijinxinganquanjiagugengxin。lixiangqingkuangxia,budingyinggaitongguojiamihewanzhengxingyanzhengfangshilaizidonghuagengxin。 

湖北快3kaolvxiediaodisanfanggongyingshanglaijinxingruanjiangengxin,yijiejuehegaijinloudongguanlimoshi,quebaoxiaofeizheshiyongshebeijuyouyizhengtaodeanquanfanghucuoshi。 

湖北快3kaifaloudongzidonghuachuligengxinjizhi。liru,zairuanjiangongchenglingyu,jianlilaizianquanyanjiuzheheheikeshequdeloudongbaogaoshishixinxihuoqujizhi,zheiduiruanjiankaifarenyuanhuohouqiweihurenyuanlaishuodounengdedaojishidexinxifankuihexiangying。 

湖北快3zhidingyigeloudongxiediaopiluhechulizhengce。gaizhengceyinggaishejikaifashang、shengchanshang、fuwushangheyingjixiangyingzuzhi(csirt),tongguoyingjixiangyingzuzhi,ruus-cert、ics-certtigongdeloudongbaogaojinxingdingqideloudongfenxiheyujing。 

zhenduiwulianwangshebeizhidingyigeshiyongqixiancelve。iotshebeibukenengjinxingwuxianqidegengxinheshengji,kaifarenyuanyinglejieshengchanshanghexiaofeizheqiwang,kaolvshebeishiyongqixianwenti,bingmingquechaochushiyongqixiandailaideanquanfengxian。 

3 建立一套公认的安全操作方法

湖北快3xuduozhenduichuantongithewangluoanquandecaozuoshijiankeyiyingyongyuiotlingyu,zheixiefangfakeyibangzhushibieloudong、jianceheguixing、xiangyingyujinghekuaisuhuifu。jianyi: 

湖北快3shijianjibenderuanjiananquanhewangluoanquanzuofa,bingtongguoshipei、linghuohechuangxindefangshiyingyongyuiotshengtaixitong。 

cankaoxiangguanbumendejutishijianzhidao。yixielianbangbumenzhidingyouxiangguananquanshijiantiaoli,ruguojiagaosugonglujiaotonganquanguanliju(nhtsa)fabude《xiandaiqichewangluoanquanzuijiashijianzhinan》、fdafabude《yiliaoshebeiwangluoanquandeshouhouguanli》。 

湖北快3zhixingshendufangyu。kaifashangheshengchanshangyinggaicaiyongfencengfangyuheyonghujibieweixiekaolvdezhengtianquanfanghucelve,dangmouxiegengxinshengjishixiaoshi,zheinenghenhaodifahuizuoyong。 

湖北快3jiaruloudongxinxigongxiangpingtai,jijitongbaoloudong,jishijieshoudisanfanganquanyujing。xinxigongxiangpingtaishitigaoanquanfengxianyishideguanjiangongju。rudhsheqixiashudeguojiawangluoanquantongxinxiediaozhongxin(nccic)deng。 

4 优先考虑造成潜在影响的安全措施

湖北快3butongdeiotxitongyouzhebutongdefengxianmoxing,rugongyeyonghuhelingshouyonghusuokaolvdefengxianbutong,erqiebutongyonghushebeizaochengdeanquanguzhanghouguoyebujinxiangtong,erpohuai、shujuxielu、eyigongjidengxingweijiangdaozhiqianzaideyanzhonghouguo,yinggaijiyuzhongshi。jianyi: 

湖北快3lejieshebeideyuqiyongtuheshiyonghuanjing。zheijiangyouzhuyukaifashangheshengchanshangkaolviotshebeidejishutedian、yunxingjizhihebiyaodeanquancuoshi。 

yiheikehegongjizheshijiaojianli“hongdui”caozuomoshi,zhenduiyingyongceng、wangluoceng、shujucenghewulicengjinxinganquanfenxiceshi,youcichanshengdezuizhongjieguohexiangguanhuanjiecelveyouzhuyuyouxianzhenduimouxieboruodifangzengjiaanquancuoshi。 

湖北快3duijieruwangluodeshebeijinxingshibierenzheng,youqishizhenduigongyeheshangyelingyu。yinruanquanrenzhenggongneng,jiangshiguanjianhezhongyaolingyuyonghuduiqizuzhijiagouneideshebeihefuwujinxingyouxiaokongzhiguanli。 

5 促进整个物联网生命周期的透明度

kaifashangheshengchanshangyinggailejieqizuzhiwaibugongyinglianshiyonghuotigongderuanyingjianxiangguanloudongqingkuang。daduoshushihou,yinweizaikaifaheshengchanguochengzhonghulvelegongyinglianguochenghechanpindeanquanpinggu,yixiedaichengben、yishiyongderuanyingjianhuiweiiotshebeidailaihendadeanquanyinhuan。lingwai,youyuyixiebumingdekaiyuanruanjianhuiyingyongyuiotshebeidekaifaguocheng,gengzengjialeyoucichanshengdefengxianweixie。tigaoanquanyishikeyibangzhuzhishengchanshanghegongyexiaofeizheshibie、yingyonganquancuoshihuojianlirongyucelve。genjubutongchanpin、kaifashang、shengchanshanghefuwushangdekenengchanshengdefengxian,shezhishidangdeweixiehuanjieheloudongchulicuoshi,rugengxin、chanpinzhaohuihuokehuzixun。jianyi: 

jinxingneibuhuodisanfanggongyingshangdeduandaoduanfengxianpinggu。weilezengjiaanquantoumingdu,kaifashang、shengchanshang、gongyingshanghefuwushangdouyingcanfengxianpingguguocheng。lingwai,danggongyinglianhuanjiefashenggaibianshi,xiangyingdeanquancuoshiyeyinggaijinxinggaibianhuodiaozheng。 

湖北快3kaolvjianliyigeguanyuloudongbaogaodegongkaipilujizhi,ruloudongzhongcemoshideshangjinjihuadeng。 

zaigongyingshangheshengchanshangzhijiancaiyongmingxideshebeibujianshiyongqingdan,yigongjianxinrenjizhi。yifenmingxiqingdanduiiotshengtaixitongdefengxianguanliheweixiechulifeichangyouyong。 

6 谨慎接入互联网

zaigongyehuanjingheqitaguanjianyingyonglingyudewulianwangyonghu,yingshenshenkaolvshifouxuyaobaiotshebeijieruwangluo,bingqingchuyoucidaozhidezhongduanheqitaanquanfengxian。zaidangqianfuzadewangluohuanjingzhong,renhewulianwangshebeizaiqishengmingzhouqineidouyoukenenghuizaodaopohuai,wulianwangshebeikaifashang、shengchanshanghexiaofeizheyinggailejiexiangguanshebeibeipohuaihezhongduanduizhuyaogongnengheyewuyunyingzaochengdeyingxiang。jianyi: 

jianyiiotyonghumingquerenhewangluolianjiexingzhihemude。rugongyekongzhidengyixieguanjianhuanjingshiyongdeiotshebeimeibiyaojieruwangluo。 

peizhitidaixinglianjiefangan。weilejiaqiangshendufangyucelve,zaibujieruhulianwangdeqingkuangxia,keyixuanzepeizhijierubendiwangluojinxingguanjianxinxishoujihepinggu。juticankao:

湖北快3zaiyixiexuanzexinglianjiefanganzhong,yunxushengchanshang、fuwushangheyonghujinyongtedingduankouhelianjiegongneng。zhenduibutongiotshebeiyongtu,shezhiyonghuduanzhidaohekongzhifangan。 

*转载来自FreeBuf(FreeBuf.COM)