云计算中心等级保护方案.docx

云计算中心等级保护方案 （信息安全建设整体规划方案） 目 录 TOC \o "1-4" \h \z \u HYPERLINK \l "_Toc526946461" 1 项目背景 PAGEREF _Toc526946461 \h 5 HYPERLINK \l "_Toc526946462" 2 等级保护建设流程 PAGEREF _Toc526946462 \h 6 HYPERLINK \l "_Toc526946463" 3 方案参照标准 PAGEREF _Toc526946463 \h 8 HYPERLINK \l "_Toc526946464" 4 技术体系方案设计 PAGEREF _Toc526946464 \h 10 HYPERLINK \l "_Toc526946465" 4.1 方案设计目标 PAGEREF _Toc526946465 \h 10 HYPERLINK \l "_Toc526946466" 4.2 方案设计框架 PAGEREF _Toc526946466 \h 10 HYPERLINK \l "_Toc526946467" 4.3 安全技术体系设计 PAGEREF _Toc526946467 \h 11 HYPERLINK \l "_Toc526946468" 4.3.1 物理安全设计 PAGEREF _Toc526946468 \h 11 HYPERLINK \l "_Toc526946469" 4.3.2 计算环境安全设计 PAGEREF _Toc526946469 \h 13 HYPERLINK \l "_Toc526946470" 4.3.2.1 身份鉴别 PAGEREF _Toc526946470 \h 13 HYPERLINK \l "_Toc526946471" 4.3.2.2 访问控制 PAGEREF _Toc526946471 \h 14 HYPERLINK \l "_Toc526946472" 4.3.2.3 系统安全审计 PAGEREF _Toc526946472 \h 15 HYPERLINK \l "_Toc526946473" 4.3.2.4 入侵防范 PAGEREF _Toc526946473 \h 16 HYPERLINK \l "_Toc526946474" 4.3.2.5 主机恶意代码防范 PAGEREF _Toc526946474 \h 16 HYPERLINK \l "_Toc526946475" 4.3.2.6 软件容错 PAGEREF _Toc526946475 \h 17 HYPERLINK \l "_Toc526946476" 4.3.2.7 数据完整性与保密性 PAGEREF _Toc526946476 \h 17 HYPERLINK \l "_Toc526946477" 4.3.2.8 备份与恢复 PAGEREF _Toc526946477 \h 17 HYPERLINK \l "_Toc526946478" 4.3.2.9 资源控制 PAGEREF _Toc526946478 \h 18 HYPERLINK \l "_Toc526946479" 4.3.2.10 客体安全重用 PAGEREF _Toc526946479 \h 19 HYPERLINK \l "_Toc526946480" 4.3.2.11 抗抵赖 PAGEREF _Toc526946480 \h 19 HYPERLINK \l "_Toc526946481" 4.3.3 区域边界安全设计 PAGEREF _Toc526946481 \h 19 HYPERLINK \l "_Toc526946482" 4.3.3.1 边界访问控制 PAGEREF _Toc526946482 \h 19 HYPERLINK \l "_Toc526946483" 4.3.3.2 安全隔离网闸 PAGEREF _Toc526946483 \h 21 HYPERLINK \l "_Toc526946484" 4.3.3.3 流量控制 PAGEREF _Toc526946484 \h 21 HYPERLINK \l "_Toc526946485" 4.3.3.4 边界完整性检查 PAGEREF _Toc526946485 \h 22 HYPERLINK \l "_Toc526946486" 4.3.3.5 边界入侵防御 PAGEREF _Toc526946486 \h 22 HYPERLINK \l "_Toc526946487" 4.3.3.6 边界安全审计（上网行为管理） PAGEREF _T