And then the information security of country's network of SG186 era
In 2008 one municipal power office will find accidentally, unexpectedly the account number of former electric worker who had retired in OA system and already passed away exists, and this worker's account number has still effective authority. The controller tries to delete the account number, but find because every municipal office OA account number information is both as the backup, this worker's account number authority revives self-recovery one day later
SG186 project carry on three year, from 2006 the intersection of country and one " the 11 5 " of network Plan, to nowadays, every the intersection of province and the intersection of network and system confirm in succession, say to be snap of the fingers wave one, it is multifarious to change by ten thousand. Though the whole project has not been completed finally yet, has passed the information acquisition ability of ruggedization, accelerate the transfer rate of information, raise the treatment effeciency of information, we can see, the great-leap-forward development is appearing in country's network information construction. " a platform, eight major application, six are ensured big " Goal but also step by step realization.
Undeniable, SG186 project, to the network company in the country, and even an incident of stepping the times to the whole power industry. Set up " well versed in longitudinally, integrated horizontally " Integrated enterprise layer information integration platform, upper and lower information transmit while being unblocked and idea of data sharing make the next fundamental key for the intersection of Chinese and information-based process and future thrust of power industry.
Switch back, we have, realize SG186 engineering construction, reflect some questions too, have brought many questions to safe operation after the whole informationization of a network of the country.
The construction on SG186 is conceived looks, it is " safe protection system " that stand in the breach in six major security systems ,It means, in the intersection of SG186 and the intersection of project and planning stage, consider safe importance in the intersection of electric wire netting and information-based course already right away, but so far as construction at present, every province network consider reach the standard grade the system quickly, and wait to confirm, in order to finish the task. As to originally looking on as the safe precaution with information-based synchronized construction is managed, but obviously lag behind. The reason to cause such situation on one hand the units at all levels have insufficient understanding of safety management of information, on the other hand even because the security risk that SG186 project brings and threatening to make people really quite unexpected and having no way of doing it.
Let's see a case:
In 2008 one municipal power office will find accidentally, unexpectedly the account number of former electric worker who had retired in OA system and already passed away exists, and this worker's account number has still effective authority. The controller tries to delete the account number, but find because every municipal office OA account number information is both as the backup, this worker's account number authority revives self-recovery one day later
The above-mentioned cases are the true incident that one province utility happens after confirming through country's network SG186, can do for a representative of SG186 information security current situations at the present stage. From in,find out we at least two piece respect threat:
1. The management of access permission is lacked
SG186 project, has made the building policy that the systematic elasticity couples, melting joining to flow of urgent coupled system, the first line of loose coupled system is well versed in, it will cause the account number setting up and authority of the system to distribute the unprecedented one heavily and complicatedly to build in any case, what a valid supervising system access permission, the use preventing the account number from not being authorized? How guarantee province and city, county those at all levels unit leave office and worker that transfer have no longer, should belong to account number and authority of them yet? This question will be in some time of future, the maximum risk of the information security of the electric wire netting.
2. Systematic loophole risk
Any system is leaky, Microsoft released the newest patch of windows recently, mend the systematic loophole. Then, country network set up, reach the standard grade systematic the intersection of loophole and detection, the intersection of loophole and report, the intersection of issue and handle, the intersection of patch and detection, control that patch upgrades by every? Though SG186, in the project, it is already mature system software to be main and incoming, if loophole scarce to manage to system, will cause the serious threat to the information security of the electric wire netting. The account number can't delete this systematic loophole completely in the case, in terms of a gleam of through-going OA system, it influences the surface to be very big, if there is no sufficient understanding on its risk, utilized, will cause the great consequence.
The intersection of three countries and Chibi, Cao Cao lift a million bold warriors command an army, go down south, confidence full, is defeated and returns one a loud to burn one finally. This is a story of our very familiar competition of Chibi, we say Cao Cao the reason why fail, do not lie in he connects man-of-war with the horizontal tactics, it is not the cunning of lying in Wu's trick, and because he has insufficient understanding of current situation and threats existed, and not taken the isometric method to dissolve risk. He may consider attending the meeting to be attacked with fire, but the emergency preplan method without making and receives the fire attack ahead of time, or considered protecting the method, but not verified the significance of protecting method. Caused one's own one to be defeated finally.