Study On Optimization Of Network Security Incident Emergency Management System In Gansu Province

In recent years,cloud computing,big data,artificial intelligence and other Internet technology has achieved leapfrog development,a variety of new technologies and new applications of service scenarios continue to expand,the scale of users has achieved explosive growth,the generated data information is showing a geometric multiple growth,in this context,the Internet technology means "double-edged sword" effect is prominent.Network security incidents facing different scenarios,populations and information systems are increasingly emerging,bringing great challenges to Internet information service providers,users and operators around the world,especially in recent years,ransomware attacks,large-scale denial of service attacks,data leaks,telecom network fraud and other incidents.It has caused serious damage to the property safety and public interests of the broad masses of people,and the emergency response and emergency disposal of network security incidents are facing great challenges,which puts forward higher requirements for the construction of network security incident emergency management system.In view of the above background,this paper takes the operation status of the network security incident emergency management system in Gansu Province as the main research object.Based on information security management theory,crisis management theory and mechanism design theory,this paper analyzes the emergency management system through case analysis and interviews with personnel involved in the operation of the system.In-depth research and exploration of how to optimize the disposal process,improve operational efficiency and other issues,a detailed exploration of the causes of the problems,and solutions to the problems are given,providing reference for Gansu Province to further improve the emergency response to network security incidents,improve network security protection capabilities,and promote the construction of a strong network province.In terms of the response and management to network security incidents in Gansu Province in recent years,the work responsibilities of various departments have not been clearly rationalized,and the disposal process is independent and the disposal efficiency is low.Network security emergency plan is seriously formalized,and its role is not obvious.The phenomenon of "information island" and the problems of multiple reporting of information and multiple issuing of instructions appear at the same time,which greatly increases the personnel cost and time cost in the event handling work.At the same time,the emergency support force is relatively scattered,the emergency command and dispatch lack of coordination,and the emergency headquarters are virtually useless.In view of the above problems,through in-depth analysis,this paper sorts out the current network security incident emergency management system in Gansu Province in six aspects: First,the overall coordination role of the command organization is not obvious,second,the timeliness of monitoring and early warning is insufficient,third,the lack of emergency response work items,fourth,the efficiency of emergency response is low,fifth,the allocation of emergency support measures is unreasonable,and sixth,the emergency plan lacks practical guidance significance.Based on the above,this paper puts forward 10 optimization suggestions in 3aspects of the network security incident emergency management system in Gansu Province.First,refine the organizational structure setting,strengthen the provincial overall coordination,put forward three suggestions to build a strong network security incident emergency response command organization,strengthen the construction of emergency response organizational system of regional industry authorities,and strengthen the overall coordination of social forces;Second,in terms of building strong network security technical means and standardizing emergency response work,three suggestions were put forward to establish and improve network security situation awareness technical means,build a unified emergency command and dispatch communication platform for the province,and seriously investigate and evaluate the responsibility of the compaction department.The third is to strengthen the management of emergency plans and effectively exert the emergency support work force,and put forward four suggestions to do a combat-oriented emergency plan management,strengthen network security daily management and inspection and testing,strengthen personnel training and emergency technical support team management,and improve the work reward and punishment mechanism.