在各行各業(ye)數(shu)字化轉型的(de)背景(jing)下，國(guo)家先(xian)后對移動(dong)(dong)(dong)安(an)(an)(an)(an)(an)全(quan)(quan)提出了相關標準和(he)(he)(he)規范(fan)。隨(sui)著《網(wang)絡安(an)(an)(an)(an)(an)全(quan)(quan)法》、《數(shu)據(ju)(ju)安(an)(an)(an)(an)(an)全(quan)(quan)法》和(he)(he)(he)《個人信息保護(hu)(hu)法》的(de)陸續頒布，以及在2019年12月1日正式(shi)實施的(de)《網(wang)絡安(an)(an)(an)(an)(an)全(quan)(quan)等級(ji)保護(hu)(hu)基(ji)本要求(qiu)》既等級(ji)保護(hu)(hu)2.0中，給出了《網(wang)絡安(an)(an)(an)(an)(an)全(quan)(quan)等級(ji)保護(hu)(hu)基(ji)本要求(qiu)第3部分(fen)：移動(dong)(dong)(dong)互(hu)聯安(an)(an)(an)(an)(an)全(quan)(quan)擴展要求(qiu)》，明(ming)確了移動(dong)(dong)(dong)設備(bei)管(guan)控和(he)(he)(he)移動(dong)(dong)(dong)應(ying)用管(guan)控的(de)安(an)(an)(an)(an)(an)全(quan)(quan)功能要求(qiu)。由此，需(xu)要對移動(dong)(dong)(dong)化發展中涉(she)及的(de)移動(dong)(dong)(dong)設備(bei)、移動(dong)(dong)(dong)應(ying)用、網(wang)絡通(tong)信、業(ye)務數(shu)據(ju)(ju)和(he)(he)(he)個人隱私，進行安(an)(an)(an)(an)(an)全(quan)(quan)管(guan)理和(he)(he)(he)安(an)(an)(an)(an)(an)全(quan)(quan)防護(hu)(hu)，移動(dong)(dong)(dong)安(an)(an)(an)(an)(an)全(quan)(quan)管(guan)理平臺應(ying)運(yun)而生。安(an)(an)(an)(an)(an)全(quan)(quan)加固(gu)可以實現移動(dong)(dong)(dong)應(ying)用的(de)防逆向分(fen)析、敏感數(shu)據(ju)(ju)保護(hu)(hu)等，確保移動(dong)(dong)(dong)應(ying)用程序APP安(an)(an)(an)(an)(an)全(quan)(quan)及可靠運(yun)行。密碼認證(zheng)

隨著移動(dong)(dong)化(hua)(hua)業(ye)(ye)務(wu)(wu)的(de)(de)發(fa)展(zhan)，企業(ye)(ye)遠程辦(ban)公需求(qiu)激增，上(shang)(shang)訊(xun)(xun)信(xin)息(xi)結合實(shi)際的(de)(de)應(ying)用場景，對(dui)傳統(tong)的(de)(de)邊界防(fang)護(hu)體(ti)系(xi)進(jin)行(xing)改造升級，構建更加(jia)適應(ying)企業(ye)(ye)業(ye)(ye)務(wu)(wu)發(fa)展(zhan)的(de)(de)零(ling)信(xin)任(ren)移動(dong)(dong)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)防(fang)護(hu)體(ti)系(xi)，通(tong)過提供安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)可(ke)信(xin)的(de)(de)訪(fang)問、網絡安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)傳輸、持(chi)續信(xin)任(ren)評估和動(dong)(dong)態(tai)訪(fang)問控制等能(neng)力，保障(zhang)企業(ye)(ye)移動(dong)(dong)業(ye)(ye)務(wu)(wu)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)高(gao)效開展(zhan)。上(shang)(shang)訊(xun)(xun)信(xin)息(xi)移動(dong)(dong)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)防(fang)護(hu)方案，遵循零(ling)信(xin)任(ren)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)架構，采用檢測(ce)與響應(ying)的(de)(de)自適應(ying)機制，通(tong)過安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)檢測(ce)加(jia)固、設備安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)管控、安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)沙箱(xiang)隔(ge)離、風險威脅(xie)監(jian)測(ce)、安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)隧(sui)道通(tong)信(xin)和數據泄露防(fang)護(hu)等功(gong)能(neng)，構建一體(ti)化(hua)(hua)、自動(dong)(dong)化(hua)(hua)、全(quan)(quan)(quan)(quan)(quan)(quan)周期的(de)(de)零(ling)信(xin)任(ren)移動(dong)(dong)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)防(fang)護(hu)體(ti)系(xi)，實(shi)現(xian)移動(dong)(dong)業(ye)(ye)務(wu)(wu)的(de)(de)全(quan)(quan)(quan)(quan)(quan)(quan)周期安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)防(fang)護(hu)，保障(zhang)移動(dong)(dong)業(ye)(ye)務(wu)(wu)的(de)(de)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)運行(xing)和高(gao)效開展(zhan)。設備合規檢測(ce)移動(dong)(dong)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)防(fang)護(hu)解(jie)決方案可(ke)選擇上(shang)(shang)訊(xun)(xun)信(xin)息(xi)移動(dong)(dong)安(an)(an)(an)全(quan)(quan)(quan)(quan)(quan)(quan)管理平臺。

通(tong)過部署移(yi)動安全(quan)管(guan)理平臺，針對(dui)企業敏(min)(min)(min)感數(shu)(shu)(shu)(shu)據(ju)(ju)，進(jin)(jin)行文件存(cun)(cun)(cun)儲(chu)加(jia)密、頁(ye)面(mian)截(jie)屏(ping)防護(hu)(hu)、內容(rong)復(fu)制(zhi)限制(zhi)、頁(ye)面(mian)數(shu)(shu)(shu)(shu)字水(shui)(shui)印、遠(yuan)程(cheng)(cheng)數(shu)(shu)(shu)(shu)據(ju)(ju)擦除和恢復(fu)出廠設置(zhi)等(deng)數(shu)(shu)(shu)(shu)據(ju)(ju)泄(xie)漏防護(hu)(hu)，實現(xian)敏(min)(min)(min)感數(shu)(shu)(shu)(shu)據(ju)(ju)從(cong)存(cun)(cun)(cun)儲(chu)、使(shi)用(yong)、分享、傳(chuan)輸(shu)(shu)到銷毀的(de)全(quan)生命周期(qi)保(bao)(bao)護(hu)(hu)。針對(dui)存(cun)(cun)(cun)儲(chu)數(shu)(shu)(shu)(shu)據(ju)(ju)，采用(yong)國密算法進(jin)(jin)行加(jia)密保(bao)(bao)護(hu)(hu)；在數(shu)(shu)(shu)(shu)據(ju)(ju)使(shi)用(yong)過程(cheng)(cheng)中，通(tong)過文件透明加(jia)密、頁(ye)面(mian)截(jie)屏(ping)防護(hu)(hu)、頁(ye)面(mian)數(shu)(shu)(shu)(shu)字水(shui)(shui)印、內容(rong)復(fu)制(zhi)限制(zhi)、安全(quan)鍵盤輸(shu)(shu)入等(deng)措施，防止敏(min)(min)(min)感數(shu)(shu)(shu)(shu)據(ju)(ju)泄(xie)露(lu)；在數(shu)(shu)(shu)(shu)據(ju)(ju)傳(chuan)輸(shu)(shu)時(shi)，通(tong)過網絡安全(quan)隧道進(jin)(jin)行加(jia)密和完整性保(bao)(bao)護(hu)(hu)；當終(zhong)端回收或(huo)丟失時(shi)，能夠遠(yuan)程(cheng)(cheng)擦除數(shu)(shu)(shu)(shu)據(ju)(ju)和恢復(fu)出廠確保(bao)(bao)無敏(min)(min)(min)感數(shu)(shu)(shu)(shu)據(ju)(ju)殘(can)留(liu)，實現(xian)數(shu)(shu)(shu)(shu)據(ju)(ju)從(cong)存(cun)(cun)(cun)儲(chu)、使(shi)用(yong)、傳(chuan)輸(shu)(shu)到銷毀的(de)全(quan)生命周期(qi)保(bao)(bao)護(hu)(hu)，確保(bao)(bao)數(shu)(shu)(shu)(shu)據(ju)(ju)可(ke)信。

移(yi)(yi)動(dong)安(an)(an)(an)全(quan)管(guan)理(li)平臺，采用(yong)檢(jian)測(ce)(ce)(ce)(ce)、防(fang)護(hu)(hu)、監(jian)測(ce)(ce)(ce)(ce)和響(xiang)應(ying)的(de)(de)安(an)(an)(an)全(quan)模型。在上線前(qian)，對(dui)移(yi)(yi)動(dong)設(she)備(bei)的(de)(de)合規性和移(yi)(yi)動(dong)應(ying)用(yong)程序漏洞進(jin)行(xing)安(an)(an)(an)全(quan)檢(jian)測(ce)(ce)(ce)(ce)，做到早發(fa)現早處理(li)；在使用(yong)中，對(dui)運行(xing)環境(jing)、威脅攻(gong)擊和敏感操作(zuo)(zuo)進(jin)行(xing)持(chi)續安(an)(an)(an)全(quan)監(jian)測(ce)(ce)(ce)(ce)，并依據監(jian)測(ce)(ce)(ce)(ce)結果，及時采取(qu)響(xiang)應(ying)防(fang)護(hu)(hu)措施阻(zu)斷(duan)威脅攻(gong)擊；在事(shi)后，通(tong)過(guo)日志記(ji)錄和監(jian)測(ce)(ce)(ce)(ce)行(xing)為(wei)，對(dui)安(an)(an)(an)全(quan)事(shi)件進(jin)行(xing)操作(zuo)(zuo)審計(ji)和定位溯(su)源。通(tong)過(guo)事(shi)前(qian)安(an)(an)(an)全(quan)檢(jian)測(ce)(ce)(ce)(ce)、事(shi)中監(jian)測(ce)(ce)(ce)(ce)響(xiang)應(ying)防(fang)護(hu)(hu)和事(shi)后審計(ji)溯(su)源，構建移(yi)(yi)動(dong)設(she)備(bei)、移(yi)(yi)動(dong)應(ying)用(yong)和移(yi)(yi)動(dong)數據為(wei)一(yi)體(ti)的(de)(de)移(yi)(yi)動(dong)安(an)(an)(an)全(quan)整體(ti)防(fang)護(hu)(hu)體(ti)系(xi)。 移(yi)(yi)動(dong)應(ying)用(yong)安(an)(an)(an)全(quan)加(jia)固，采用(yong)自動(dong)化封裝形式及加(jia)殼加(jia)密(mi)和虛擬沙箱技術。

移(yi)(yi)(yi)動(dong)(dong)(dong)安(an)(an)(an)(an)全(quan)(quan)(quan)管理(li)平臺，采用(yong)(yong)(yong)模(mo)塊化(hua)設計，平臺提供的各功能(neng)模(mo)塊，能(neng)夠靈活配置，按需組合使用(yong)(yong)(yong)。企業自購移(yi)(yi)(yi)動(dong)(dong)(dong)設備(bei)，可(ke)(ke)以(yi)使用(yong)(yong)(yong)設備(bei)管理(li)模(mo)塊，解決移(yi)(yi)(yi)動(dong)(dong)(dong)設備(bei)的資產管理(li)，實(shi)現移(yi)(yi)(yi)動(dong)(dong)(dong)設備(bei)的安(an)(an)(an)(an)全(quan)(quan)(quan)管控；企業移(yi)(yi)(yi)動(dong)(dong)(dong)辦公(gong)，員工(gong)自帶(dai)移(yi)(yi)(yi)動(dong)(dong)(dong)設備(bei)，可(ke)(ke)以(yi)使用(yong)(yong)(yong)應(ying)用(yong)(yong)(yong)管理(li)模(mo)塊，在應(ying)用(yong)(yong)(yong)發布前進(jin)行(xing)(xing)安(an)(an)(an)(an)全(quan)(quan)(quan)檢測和(he)漏(lou)洞掃描(miao)，待處理(li)完漏(lou)洞可(ke)(ke)以(yi)進(jin)行(xing)(xing)應(ying)用(yong)(yong)(yong)安(an)(an)(an)(an)全(quan)(quan)(quan)加固(gu)，并(bing)通(tong)過應(ying)用(yong)(yong)(yong)商(shang)店進(jin)行(xing)(xing)移(yi)(yi)(yi)動(dong)(dong)(dong)應(ying)用(yong)(yong)(yong)的上線(xian)發布和(he)版本升級；企業運營移(yi)(yi)(yi)動(dong)(dong)(dong)應(ying)用(yong)(yong)(yong)，可(ke)(ke)以(yi)使用(yong)(yong)(yong)應(ying)用(yong)(yong)(yong)安(an)(an)(an)(an)全(quan)(quan)(quan)沙箱(xiang)，在應(ying)用(yong)(yong)(yong)運行(xing)(xing)時，對異常運行(xing)(xing)環境(jing)和(he)威脅攻擊行(xing)(xing)為進(jin)行(xing)(xing)實(shi)時監測，評估移(yi)(yi)(yi)動(dong)(dong)(dong)安(an)(an)(an)(an)全(quan)(quan)(quan)風險，感知移(yi)(yi)(yi)動(dong)(dong)(dong)安(an)(an)(an)(an)全(quan)(quan)(quan)態勢。購買移(yi)(yi)(yi)動(dong)(dong)(dong)安(an)(an)(an)(an)全(quan)(quan)(quan)防護產品(pin)可(ke)(ke)咨詢上訊(xun)信息移(yi)(yi)(yi)動(dong)(dong)(dong)安(an)(an)(an)(an)全(quan)(quan)(quan)產品(pin)線(xian)。框架組件漏(lou)洞

動態授(shou)權的(de)能力主要(yao)是確(que)保(bao)只有可(ke)信的(de)訪(fang)問主體(ti)，才(cai)能對授(shou)權業(ye)務(wu)應用可(ke)見(jian)、可(ke)連(lian)接、可(ke)訪(fang)問。密碼認證

移(yi)動(dong)應(ying)用(yong)防逆向保(bao)護(hu)，通(tong)(tong)過(guo)加(jia)殼(ke)加(jia)密、控(kong)制流混淆(xiao)(xiao)及(ji)虛擬化(hua)(hua)指(zhi)令等技(ji)術，對(dui)(dui)(dui)移(yi)動(dong)應(ying)用(yong)中的DEX文(wen)件(jian)(jian)(jian)、SO庫文(wen)件(jian)(jian)(jian)及(ji)JS文(wen)件(jian)(jian)(jian)進行(xing)加(jia)密保(bao)護(hu)，增加(jia)代(dai)(dai)(dai)碼逆向分(fen)析的難度。采(cai)用(yong)動(dong)態加(jia)載(zai)(zai)、JAVA2C及(ji)VMP等技(ji)術，對(dui)(dui)(dui)程序(xu)DEX文(wen)件(jian)(jian)(jian)進行(xing)保(bao)護(hu)，通(tong)(tong)過(guo)函數(shu)分(fen)離抽取和虛擬化(hua)(hua)執行(xing)，實(shi)現DEX文(wen)件(jian)(jian)(jian)代(dai)(dai)(dai)碼安全加(jia)固；采(cai)用(yong)動(dong)態加(jia)載(zai)(zai)及(ji)高(gao)級(ji)混淆(xiao)(xiao)技(ji)術，對(dui)(dui)(dui)程序(xu)SO庫文(wen)件(jian)(jian)(jian)進行(xing)保(bao)護(hu)，通(tong)(tong)過(guo)函數(shu)控(kong)制流深(shen)度混淆(xiao)(xiao)，實(shi)現SO庫文(wen)件(jian)(jian)(jian)代(dai)(dai)(dai)碼安全加(jia)固；采(cai)用(yong)動(dong)態加(jia)載(zai)(zai)及(ji)虛擬化(hua)(hua)技(ji)術，對(dui)(dui)(dui)JS代(dai)(dai)(dai)碼進行(xing)保(bao)護(hu)，通(tong)(tong)過(guo)函數(shu)控(kong)制流混淆(xiao)(xiao)和虛擬指(zhi)令，實(shi)現JS文(wen)件(jian)(jian)(jian)代(dai)(dai)(dai)碼安全加(jia)固。除(chu)了針對(dui)(dui)(dui)移(yi)動(dong)應(ying)用(yong)APP加(jia)固之外，還(huan)可以對(dui)(dui)(dui)JAR或AAR等SDK庫文(wen)件(jian)(jian)(jian)進行(xing)加(jia)密混淆(xiao)(xiao)，防止非(fei)法人員進行(xing)逆向分(fen)析和代(dai)(dai)(dai)碼竊取，實(shi)現SDK庫文(wen)件(jian)(jian)(jian)代(dai)(dai)(dai)碼混淆(xiao)(xiao)，增加(jia)逆向分(fen)析的難度。密碼認(ren)證

本文(wen)來自宜興市恒通風機(ji)有限公司(si)：//vijoo.com.cn/Article/52b0699941.html