摘要： 计算机事件响应是对信息系统的可用性、完整性、机密性、非否认性和可控性服务进行防御和恢复的过程,是信息保障的重要步骤,是当前信息安全体系结构中不可缺少的重要环节。文章从工程学的角度提出了响应组的组织结构和管理方法,对紧急事件响应的方法学进行了研究,提出了适合于深航自身的紧急事件响应方法学,为深航组建自己的计算机紧急事件响应组奠定了基础。

关键词: 事件响应组, 信息安全, 信息保障

Abstract: Computer emergency response (CER) means process that when information systems are reacted and recovered from those attacks through the application of security services such as availability,integrity,confidentiality,non-repudiation and controllability. It is not only an important step of information assurance but also a critical practice in the network security of the existing system. This paper mainly researches structure and functions of computer emergency response team (CERT) which in range of engineering science in Shenzhen Airlines (SZA),and the methodology of SZACERT is introduced. It is ready to construct SZACERT.

中图分类号: 

• TP399