《工业互联网导论》课件 10-4 工业应用安全

《工业互联网导论》AnIntroductiontoIndustrialInternetLecturer：ZhouHaifei应用安全10.4应用安全应用安全，指工业互联网平台安全与工业应用软件安全。指支撑工业互联网业务运行的应用软件及平台的安全，包括各类移动应用。Applicationsecurity10.4ApplicationSecurityApplicationsecurityreferstoindustrialInternetplatformsecurityandindustrialapplicationsoftwaresecurity.ItreferstothesecurityofapplicationsoftwareandplatformsthatsupporttheoperationofindustrialInternetservices,includingvariousmobileapplications.平台安全威胁10.4应用安全平台安全威胁也在上升，例如，数据泄露、篡改、丢失、权限控制异常、系统漏洞利用、账户劫持、恶意内部人员攻击、拒绝服务攻击、共享技术漏洞、设备接入安全等。threatsofplatformsecurity10.4ApplicationSecurityThethreatsofplatformsecurityarealsoincreasing.Forexample,dataleakage,tampering,loss,abnormalaccesscontrol,systemvulnerabilityexploitation,accounthijacking,maliciousinsiderattacks,denialofserviceattacks,sharingtechnologyvulnerabilities,deviceaccesssecurity,etc.应用安全威胁10.4应用安全工业应用软件最大的风险来自安全漏洞，包括开发过程中编码不符合安全规范而导致的软件本身的漏洞，以及由于使用不安全的第三方库而引起的漏洞等。threatsofapplicationsecurity10.4ApplicationSecurityThebiggestriskofindustrialapplicationsoftwarecomesfromsecurityvulnerabilities,including,duringthedevelopmentprocess,vulnerabilitiesinthesoftwarecausedbycodinginconsistentwithsecurityspecifications,andvulnerabilitiescausedbytheuseofinsecurethird-partylibraries.防护技术10.4应用安全应用安全防护技术主要包括工业互联网平台安全防护技术和工业应用软件安全防护技术。protectiontechnology10.4ApplicationSecurityApplicationsecurityprotectiontechnologymainlyincludesindustrialInternetplatformsecurityprotectiontechnologyandindustrialapplicationsoftwaresecurityprotectiontechnology.平台安全防护技术10.4应用安全platformsecurityprotectiontechnology10.4ApplicationSecurity安全审计10.4应用安全安全审计，主要是指对平台中与安全有关的活动的相关信息进行识别、记录、存储和分析。securityaudit10.4ApplicationSecuritySecurityauditmainlyreferstotheidentification,recording,storageandanalysisofrelevantinformationaboutsecurity-relatedactivitiesontheplatform.认证授权10.4应用安全认证授权，采用灵活的认证授权机制保证不同用户能够访问不同的数据资产。authenticationandauthorization10.4ApplicationSecurityAuthenticationandauthorizationreferstotheuseofflexibleauthenticationandauthorizationmechanismstoensurethatdifferentuserscanaccessdifferentdataassets.DDOS防御10.4应用安全DDOS防御，部署DDOS防御系统，在遭受DDOS攻击时，保证平台用户的正常使用。DDOSdefense10.4ApplicationSecurityDDOSdefensereferstothedeploymentofaDDOSdefensesystemtoensurethenormaluseofplatformusersintheeventofaDDOSattack.安全隔离10.4应用安全安全隔离，采取必要的隔离措施，防止蠕虫病毒等安全威胁通过平台向不同用户扩散。Securityisolation10.4ApplicationSecuritySecurityisolationreferstotakingnecessaryisolationmeasurestopreventsecuritythreatssuchaswormsfromspreadingtodifferentusersthroughtheplatform.安全监测10.4应用安全安全监测，通过对系统运行参数以及各类日志进行分析，确保故障管理、性能管理和自动检修管理，实现平台运行状态的实时监测。securitymonitoring10.4ApplicationSecuritySecuritymonitoringreferstothereal-timemonitoringoftheoperatingstatusoftheplatformbyanalyzingsystemoperatingparametersandvariouslogstoensurefaultmanagement,performancemanagement,andautomaticmaintenancemanagement.补丁升级10.4应用安全补丁升级，平台在设计之初就应当充分考虑如何对平台进行补丁升级的问题。patchupgrade10.4ApplicationSecurityPatchupgrademeansthattheplatformshouldfullyconsiderhowtoupgradetheplatformatthebeginningofitsdesign.虚拟化安全10.4应用安全虚拟化安全，针对不同层次及不同用户的有效隔离，其安全增强可以通过采用虚拟化加固等防护措施来实现。virtualizationsecurity10.4ApplicationSecurityVirtualizationsecurityreferstotheeffectiveisolationofdifferentlevelsanddifferentusers,anditssecurityenhancementcanbeachievedthroughtheuseofvirtualizationreinforcementandotherprotectivemeasures.应用软件安全防护体系10.4应用安全securityprotectionsystemofapplicationsoftware10.4ApplicationSecurity代码审计10.4应用安全代码审计，检查源代码中的缺点和错误信息，分析并找到这些问题引发的安全漏洞，并提供代码修订措施和建议。codeauditi10.4ApplicationSecurityCodeauditreferstocheckingtheshortcomingsanderrormessagesinthesourcecode,analyzingandfindingthesecurityvulnerabilitiescausedbytheseproblems,andprovidingcoderevisionmeasuresandsuggestions.人员培训10.4应用安全人员培训，企业应对工业应用程序开发者进行软件源代码安全培训，减少开发者引入的漏洞和缺陷等。personneltraining10.4ApplicationSecurityPersonneltrainingmeansthatcompaniesshouldconductsoftwaresourcecodesecuritytrainingforindustrialapplicationdeveloperstoreducevulnerabilitiesanddefectsintroducedbydevelopers.漏洞扫描10.4应用安全漏洞扫描，通过扫描等手段对指定工业应用程序的安全脆弱性进行检测，发现可利用漏洞的一种安全检测行为。vulnerabilityscanning10.4ApplicationSecurityVulnerabilityscanningreferstoasecuritydetectionbehaviorthatdetectsexploitablevulnerabilitiesthroughscanningandothermeanstodetectthesecurityvulnerabilitiesofspecifiedindustrialapplications.审核测试10.4应用安全审核测试，对工业应用程序进行审核测试是为了发现功能和逻辑上的问题。audittesting10.4ApplicationSecurityAudittesting.Audittestingofindustrialapplicationsistofindfunctionalandlogicalproblems.行为监测和异常阻止10.4应用安全行为监测，通过静态行为规则匹配或者机器学习的方法，发现异常行为，发出警告或者阻止高危行为。