Research and application of security baseline in business information system

摘要

Security baseline is an important part of information network security application research. It is a basic requirement for business system security, and is also a prerequisite for conducting security assessments and solving information system security problems. This article studies the basic configuration, state management and security vulnerabilities of the security baseline to design a security baseline research plan. According to the environment configuration and classified protection of the business system, it carding the safety baseline strategy that fits the business system. The security baseline strategy checks the configuration of the business information system, and then performs security hardening on the system, which reducing business system security risks. The research and application of security baselines ensure the normal operation of business systems and reduce the cost of daily system security maintenance.