Heavyweight: Network Security Graded Protection System 2.0 Standard will be released soon

The network security level protection system 2.0 standard will be officially released on May 13. Subsequently, the "Network Security Level Protection System 2.0 National Standards Promotion Conference" under the guidance of the Cyber Security Bureau of the Ministry of Public Security and hosted by the Information Security Level Protection Evaluation Center of the Ministry of Public Security will be held in Beijing on May 16. The number of participants is expected to reach Thousands of people.

The conference will invite academicians, relevant leaders from the Cybersecurity and Security Bureau of the Ministry of Public Security, the National Standards Committee, and the Information Security Standards Committee to attend and give speeches. The main drafting unit of the standard will interpret the 2.0 national standard, aiming to make the party and government agencies and important industry departments , Enterprises, institutions, and information technology companies better understand and master the latest requirements of the Graded Protection System 2.0 National Standard, and put them into practice as soon as possible. The conference was hosted by Sangfor Technology Co., Ltd.

The network security level protection system is the basic national policy, basic system and basic method in the field of national network security. With the development of information technology and changes in the network security situation, on the basis of 1.0, the hierarchical protection system 2.0 focuses on all-round active defense, dynamic defense, overall prevention and control, and precise protection, and achieves protection against cloud computing, big data, and the Internet of Things. , Mobile Internet and industrial control information systems and other protection objects are fully covered, as well as areas other than personal and family self-built networks. The issuance of the National Standards for the Cyber Security Graded Protection System 2.0 is of great significance to strengthening my country's cyber security assurance work and enhancing its cyber security protection capabilities.

Shen Changxiang, an academician of the Chinese Academy of Engineering, mentioned the characteristics of the era of hierarchical protection 2.0 and the characteristics of the new standard for hierarchical protection of network security in his keynote speech "Restarting the Trustworthy Revolution and Consolidating the Foundation of Hierarchical Protection of Network Security". The era characteristic of Level Protection 2.0 is to ensure the security of critical information infrastructure, which is mainly divided into three levels. The first level is legal support, that is, my country’s computer system hierarchical protection regulations have been upgraded to the national basic legal system, that is, the cyber security hierarchical protection system in the "Cyber Security Law"; the second level is the scientific and technological level, which consists of Passive protection has developed into active immune protection under the framework of scientific security; the third level is the engineering application level, from the traditional computer system protection to the construction of the cyberspace active protection system under the new computing environment.

The new network security level protection standard has three characteristics. First, the basic requirements, evaluation requirements and design technical requirements for level protection are unified, namely: the triple protection structure frame supported by the security management center; second, general security requirements + new models Application security extension requirements, including cloud computing, mobile Internet, Internet of Things, industrial control systems, etc. into the standard specifications; third, including trusted verification in the main functional requirements of all levels and links. Based on this, in the Equal Protection 2.0 era, comprehensive security protection should be focused on cloud computing, mobile internet, Internet of Things, industrial control, and big data security to ensure the security of critical information infrastructure.