Set Up The Information Security Guarantee System Of The Telecom Business Enterprise

This paper mainly studies on the application of the information security theories and technologies in the network system of the telecommunication business enterprise, which is the information security of the telecom business enterprise. And then brings forward the solution of the information security guarantee system for it in the end. Firstly, it introduces the information security theories and technologies used in the study. The information security theories mainly includes PPDR-the dynamic security model, SSE-CMM, PADMINEE-the life cycle of information security engineering model, BS7799 - the standard of information security management, the Grade-classification Standard of Information System Security Protection, IATF-the technical framework of information security guarantee and the Principle of Wooden Pail etc. And the information security technologies consist of the technology of firewall, invasion detection, virus prevention and cure, loophole scanning, the identity certification and the SOC etc.Then it studies on the designing of the information security guarantee system. In designing of the information security guarantee system of the telecom business enterprises, we need to follow the wooden pail principle of the network information security, the integrality principle of the network information security, security evaluation and balance principle, standardization and consistency principle, the principle of the combination of the technology and management, the principle of unified planning and separate implement, grade-classification principle and maneuverability principle. The information security guarantee system framework can be divided into the security management framework and the security technology framework. The security management framework includes the security policy, security organization and security operation. And the security technology framework includes the Identification and Authentication, the Access Control, the Content Security, the Redundant and Recovery and the Audit and Response. For the integrality of the information security guarantee system, it should think on the technology framework and the management framework together while it is designed.Finally, it studies deeply on the information security guarantee system in the network and system of the telecomm business enterprise, and puts forward an overall information security solution which focuses on the security policy based on the...