China Unicom: Preventing Security Vulnerabilities and Ensuring the Security of Important Business and Resources

Background of the project

China Unicom has more than 1,400 commercial product business platforms on the entire network, carrying a wide variety of bearer services and involving a large user group. Once a security incident  occurs, it will bring great negative effects and economic losses to China Unicom. At the same time, the Ministry of Industry and Information Technology of the People's Republic of China issued the "Administrative Measures for Communication Network Security Protection" in Decree 11 of 2010. According to the regulations, network security protection measures and risk assessments should be carried out once a year for network units of level 3 and above, and Report the relevant situation to the filing agency. In order to ensure the efficient and high-quality operation of China Unicom's commercial product business platform network and system, meet business needs, prevent the network and system from external and internal attacks and abuses, and avoid and reduce various security threats Potential security risks caused by business platform networks and systems require comprehensive security assessment and reinforcement of China Unicom's commercial product business platform to improve the overall level of security protection.

solution

Net Royal Nebula provides detailed overall assessment plan according to the actual needs of the project, including overall process, technical methods and service plan design, etc., mainly starting from the business platform risk assessment, security management and operation and maintenance system assessment.

◆ Business platform risk assessment

Asset identification of China Unicom's key commercial product business platform. Asset identification includes the business platform's hardware, software, bearer services, various types of data, and documents. Based on this, the platform's security risk assessment is performed, including threat identification and vulnerability identification. Vipass uses brittleness-based association analysis and confirmation of existing security measures.

◆ Safety management and operation and maintenance system evaluation

Through the understanding of the safety work life cycle, from the risk assessment, safety system planning, and implementation of all aspects of the safety system with solutions and strategies design, the safety system is gradually improved through the construction process, and the process of operation maintenance and management is carried out. Satisfy the security needs at all levels of security work, and help China Unicom achieve comprehensive, continuous, and focused security assurance throughout the process.

Customer benefits

This project focuses on ensuring the safe operation of China Unicom's commercial product business platform. On the one hand, it completes the requirements of the Ministry of Industry and Information Technology to conduct compliance security inspections; on the other hand, it discovers existing security vulnerabilities in China Unicom's commercial product business platform and proposes corresponding hardening solutions in a timely manner. , Reducing the potential security risks of the platform and protecting the security of important services and resources of China Unicom.