LD/T 04-2022 人力资源社会保障网络安全监测和应急处置规范

ICS35.040

CCSL80LD

中华人民共和国劳动和劳动安全行业标准

LD/T04—2022

人力资源社会保障

网络安全监测和应急处置规范

Specificationforhumanresourcesandsocialsecurity

networksecuritymonitoringandemergencydisposal

2022-06-22发布2022-07-01实施

中华人民共和国人力资源和社会保障部发布

LD/T04-2022

目次

前言.......................................................................................................................................................................III

引言.......................................................................................................................................................................IV

1范围.....................................................................................................................................................................1

2规范性引用文件.................................................................................................................................................1

3术语和定义.........................................................................................................................................................1

4网络安全监测技术框架.....................................................................................................................................2

4.1监测主要构成..............................................................................................................................................2

4.2监测分类......................................................................................................................................................3

5网络安全监测技术要求.....................................................................................................................................3

5.1采集..............................................................................................................................................................3

5.2存储..............................................................................................................................................................4

5.3分析..............................................................................................................................................................4

5.4展示..............................................................................................................................................................5

5.5告警..............................................................................................................................................................5

5.6安全预警......................................................................................................................................................6

6网络安全监测基础要求.....................................................................................................................................6

6.1性能要求......................................................................................................................................................6

6.2系统安全要求..............................................................................................................................................6

7网络安全事件分类.............................................................................................................................................7

7.1分类原则......................................................................................................................................................7

7.2事件分类......................................................................................................................................................7

8网络安全事件分级...........................................................................................................................................10

8.1分级原则....................................................................................................................................................10

8.2事件分级....................................................................................................................................................11

9应急处置机构与职责.......................................................................................................................................11

9.1应急处置机构............................................................................................................................................11

9.2职责.............................................................................................................................................................11

10安全产品运营要求.........................................................................................................................................11

11安全事件应急处置流程.................................................................................................................................11

11.1安全事件监测..........................................................................................................................................12

11.2启动预案..................................................................................................................................................12

11.3应急处置..................................................................................................................................................12

I

LD/T04-2022

11.4结束响应..................................................................................................................................................13

11.5事件调查和报告......................................................................................................................................13

II

LD/T04-2022

前  言

本文件按照GB/T1.1—2020《标准化工作导则第1部分：标准化文件的结构和起草规则》的规定

起草。

本文件用于指导人力资源社会保障部门开展网络安全监测和应急处置工作。

本文件由中华人民共和国人力资源社会保障部信息中心提出并归口。

本文件起草单位：中华人民共和国人力资源和社会保障部信息中心、奇安信科技集团股份有限公司。

本文件主要起草人：高琦、马丹蕾、张嵩、王岩、耿建军、唐淑静、韩晓颖、成勇、张博、王祥宇、

李笑男、陈明、沈士祥、马艳婷、谢博、王可煜。

III

LD/T04-2022

引  言

为适应人力资源社会保障信息化发展要求，提高网络安全监测和应对突发网络安全事件能力，预

防和减少网络安全事件造成的损失和危害，保障基础信息网络和重要信息系统安全稳定运行，快速响

应及有效处置网络安全事件，满足人力资源社会保障网络安全体系建设和管理的需要，人力资源社会

保障部组织并制定了人力资源社会保障网络安全监测和应急处置规范。

IV

LD/T04-2022

人力资源社会保障

网络安全监测和应急处置规范

1范围

本文件给出了人力资源社会保障部门网络安全监测框架和分类，规定了网络安全监测基础要求、网

络安全监测技术要求、网络安全事件分类方法、网络安全事件分级规则、应