版本更新提示：信管網(wǎng)《信息安全工程師輔導(dǎo)資料》已更名為《信息安全工程師通關(guān)寶典》【點(diǎn)擊查看】

《信息安全工程師輔導(dǎo)資料》由信管網(wǎng)(m.xiexiliangjiufa.com)以最新版信息安全工程師教程和信息安全工程師考試大綱為基礎(chǔ)組織編寫，同時(shí)根據(jù)信息安全工程師歷年考試情況進(jìn)行一定修訂，作為信管網(wǎng)計(jì)算機(jī)技術(shù)與軟件專業(yè)技術(shù)資格（水平）考試中的中級(jí)信息安全工程師考試培訓(xùn)輔導(dǎo)資料。

第一部分為綜合知識(shí)，內(nèi)容包括：信息安全工程師綜合知識(shí)考點(diǎn)、信息安全工程師習(xí)題、信息安全工程師歷年綜合知識(shí)考點(diǎn)分析、信息安全工程師英語詞匯、信息安全工程師思維導(dǎo)圖、信息安全工程師考試大綱。

第二部分為應(yīng)用技術(shù)，內(nèi)容包括：信息安全工程師下午應(yīng)用技術(shù)要求、歷年信息安全工程師應(yīng)用技術(shù)考點(diǎn)分布、歷年信息安全工程師應(yīng)用技術(shù)真題與答案、信息安全工程師下午應(yīng)用技術(shù)模擬題。

注：該輔導(dǎo)資料僅提供給信管網(wǎng)信息安全工程師培訓(xùn)學(xué)員，不單獨(dú)出售。

信管網(wǎng)專注軟考考試與培訓(xùn)服務(wù)10余年，信管網(wǎng)中級(jí)信息安全工程師培訓(xùn)課程自信息安全工程師開考便已經(jīng)開課，培訓(xùn)出了第一批信息安全工程師人才，信息安全工程師課程由信息安全博士串講課程和信息安全工程師碩士精講課程組成，同時(shí)包郵自編內(nèi)部輔導(dǎo)資料及用品，并組編有自有信息安全工程師題庫。

關(guān)于信息安全工程師培訓(xùn)及試聽請(qǐng)查看： http://m.xiexiliangjiufa.com/aqpeixun.html

信管網(wǎng)《信息安全工程師輔導(dǎo)資料》目錄

（注：請(qǐng)以當(dāng)年最新版本為準(zhǔn)）

第一部分：信息安全工程師綜合知識(shí)

第1章 信息安全基礎(chǔ)································8

一、信息系統(tǒng)安全的四個(gè)層次································8

二、信息安全法律法規(guī)································9

三、信息安全管理································10

四、等級(jí)保護(hù)································10

五、網(wǎng)絡(luò)隔離································11

六、安全監(jiān)控································11

七、風(fēng)險(xiǎn)評(píng)估································12

八、信息安全標(biāo)準(zhǔn)化知識(shí) ································13

九、信息安全基礎(chǔ)思維導(dǎo)圖································14

十、信息安全基礎(chǔ)習(xí)題 ································21

十一、信息安全基礎(chǔ)習(xí)題答案解析································24

第2章 密碼學(xué)基礎(chǔ)與應(yīng)用································27

一、密碼學(xué)的基本概念································27

二、密碼體制 ································28

三、古典密碼 ································28

三、分組密碼 ································28

四、序列密碼 ································29

五、hash函數(shù) ································29

六、公鑰密碼體制 ································30

七、數(shù)字簽名和認(rèn)證 ································30

八、密鑰管理································ 30

九、密碼學(xué)基礎(chǔ)與應(yīng)用思維導(dǎo)圖 ································32

十、密碼學(xué)基礎(chǔ)與應(yīng)用習(xí)題 ································40

十一、密碼學(xué)基礎(chǔ)與應(yīng)用習(xí)題答案與解析································ 50

第3章 網(wǎng)絡(luò)安全基礎(chǔ) ································58

一、計(jì)算機(jī)網(wǎng)絡(luò)基本知識(shí) ································58

二、apt簡介································ 60

三、暗網(wǎng)································ 61

四、網(wǎng)絡(luò)監(jiān)聽································ 61

五、口令破解 ································61

六、拒絕服務(wù)攻擊（dos）································62

七、漏洞攻擊································ 62

八、網(wǎng)絡(luò)安全威脅································ 62

九、網(wǎng)絡(luò)蜜罐技術(shù) ································63

十、honeynet································ 63

十一、匿名網(wǎng)路（tor）································ 63

十二、網(wǎng)絡(luò)備份································ 64

十三、網(wǎng)絡(luò)安全防范意識(shí)與策略································ 64

十四、桌面用戶上網(wǎng)時(shí)可能會(huì)遇到的入侵方式································ 65

十五、無線網(wǎng)絡(luò)安全································ 65

十六、網(wǎng)絡(luò)安全基礎(chǔ)思維導(dǎo)圖································ 71

十七、網(wǎng)絡(luò)安全基礎(chǔ)習(xí)題 ································92

十八、網(wǎng)絡(luò)安全基礎(chǔ)習(xí)題答案與解析 ································103

第4章 信息系統(tǒng)安全基礎(chǔ)································ 113

一、計(jì)算機(jī)安全的定義································ 113

二、物理安全································ 114

三、計(jì)算機(jī)的可靠性技術(shù)································ 114

四、操作系統(tǒng)安全 ································115

五、數(shù)據(jù)庫系統(tǒng)的安全的概念································ 121

六、數(shù)據(jù)庫訪問控制技術(shù) ································121

七、惡意代碼································ 123

八、計(jì)算機(jī)取證································ 125

九、嵌入式系統(tǒng)安全 ································126

十、智能卡概論 ································126

十一、電力工控系統(tǒng)安全應(yīng)采用的對(duì)策 ································127

十二、信息系統(tǒng)安全基礎(chǔ)思維導(dǎo)圖································ 129

十三、信息系統(tǒng)安全基礎(chǔ)習(xí)題································ 146

十四、信息系統(tǒng)安全基礎(chǔ)習(xí)題答案與解析 ································151

第5章 應(yīng)用系統(tǒng)安全基礎(chǔ) ································156

一、web安全威脅································ 156

二、web威脅防護(hù)技術(shù)································ 156

三、電子商務(wù)安全 ································159

四、信息隱藏 ································164

五、網(wǎng)絡(luò)輿情································ 166

六、隱私保護(hù) ································167

七、應(yīng)用系統(tǒng)安全基礎(chǔ)思維導(dǎo)圖 ································168

八、應(yīng)用系統(tǒng)安全基礎(chǔ)習(xí)題································ 179

九、應(yīng)用系統(tǒng)安全基礎(chǔ)習(xí)題答案與解析································ 182

第6章 網(wǎng)絡(luò)安全技術(shù)與產(chǎn)品 ································185

一、網(wǎng)絡(luò)安全需求分析與基本設(shè)計(jì) ································185

二、網(wǎng)絡(luò)流量監(jiān)控和協(xié)議分析 ································188

三、網(wǎng)絡(luò)安全風(fēng)險(xiǎn)評(píng)估實(shí)施 ································189

四、網(wǎng)絡(luò)安全防護(hù)技術(shù)的應(yīng)用································ 194

五、網(wǎng)絡(luò)安全技術(shù)與產(chǎn)品習(xí)題································ 197

六、網(wǎng)絡(luò)安全技術(shù)與產(chǎn)品習(xí)題答案與解析································ 200

第7章 信息系統(tǒng)安全工程································ 203

一、訪問控制 ································203

二、口令猜測技術(shù) ································204

三、hashcat ································205

四、信息系統(tǒng)安全的需求分析與設(shè)計(jì)原則································ 205

五、目前信息系統(tǒng)安全標(biāo)準(zhǔn)體系 ································208

六、信息系統(tǒng)安全的開發(fā)構(gòu)建過程································ 208

七、安全信息系統(tǒng)的實(shí)現(xiàn) ································209

八、信息系統(tǒng)安全測評(píng) ································210

九、信息系統(tǒng)安全工程習(xí)題································ 214

十、信息系統(tǒng)安全工程習(xí)題答案與解析································ 216

第8章 應(yīng)用安全工程································ 217

一、web安全威脅 ································217

二、電子商務(wù)安全的需求分析與基本設(shè)計(jì)································ 217

三、網(wǎng)絡(luò)安全································ 219

四、數(shù)據(jù)及支付安全································ 219

五、手機(jī)系統(tǒng)的防范措施如下································220

六、應(yīng)用安全工程習(xí)題 ································221

七、應(yīng)用安全工程習(xí)題答案與解析································ 223

第9章 信息安全英語詞匯 ································225

第10章 信息安全工程師上午考點(diǎn)分析································ 229

附錄1  2020年信息安全工程師考試大綱 ································231

第二部分：信息安全工程師應(yīng)用技術(shù)

第1章 信息安全工程師下午應(yīng)用技術(shù)綜述································251

考試大綱中對(duì)應(yīng)用技術(shù)的要求 ································251

信息安全工程師歷年應(yīng)用技術(shù)科目真題知識(shí)點(diǎn)分布 ································256

第2章 信息安全工程師下午應(yīng)用技術(shù)真題································ 257

2018年信息安全工程師下午應(yīng)用技術(shù)真題試題一與答案································ 257

2018年信息安全工程師下午應(yīng)用技術(shù)真題試題二與答案 ································258

2018年信息安全工程師下午應(yīng)用技術(shù)真題試題三與答案································ 259

2018年信息安全工程師下午應(yīng)用技術(shù)真題試題四與答案································ 261

2018年信息安全工程師下午應(yīng)用技術(shù)真題試題五與答案 ································264

2017年信息安全工程師下午應(yīng)用技術(shù)真題試題一與答案································ 266

2017年信息安全工程師下午應(yīng)用技術(shù)真題試題二與答案 ································266

2017年信息安全工程師下午應(yīng)用技術(shù)真題試題三與答案································ 267

2017年信息安全工程師下午應(yīng)用技術(shù)真題試題四與答案································ 269

2017年信息安全工程師下午應(yīng)用技術(shù)真題試題五與答案································ 271

2017年信息安全工程師下午應(yīng)用技術(shù)真題試題六與答案 ································272

2016年信息安全工程師下午應(yīng)用技術(shù)真題試題一與答案································ 274

2016年信息安全工程師下午應(yīng)用技術(shù)真題試題二與答案 ································275

2016年信息安全工程師下午應(yīng)用技術(shù)真題試題三與答案································ 276

2016年信息安全工程師下午應(yīng)用技術(shù)真題試題四與答案 ································278

2016年信息安全工程師下午應(yīng)用技術(shù)真題試題五與答案································ 279

第3章 信息安全工程師下午應(yīng)用技術(shù)模擬題································ 281

信息安全工程師下午應(yīng)用技術(shù)模擬題1 ································281

信息安全工程師下午應(yīng)用技術(shù)模擬題2 ································282

信息安全工程師下午應(yīng)用技術(shù)模擬題3 ································282

信息安全工程師下午應(yīng)用技術(shù)模擬題4 ································283

信息安全工程師下午應(yīng)用技術(shù)模擬題5································ 284

信息安全工程師下午應(yīng)用技術(shù)模擬題6 ································287

信息安全工程師下午應(yīng)用技術(shù)模擬題7 ································291

信息安全工程師下午應(yīng)用技術(shù)模擬題8 ································293

信息安全工程師下午應(yīng)用技術(shù)模擬題9 ································294

信息安全工程師下午應(yīng)用技術(shù)模擬題10 ································300

信息安全工程師下午應(yīng)用技術(shù)模擬題11································ 303

信息安全工程師下午應(yīng)用技術(shù)模擬題12 ································307

信息安全工程師下午應(yīng)用技術(shù)模擬題13································ 310

信息安全工程師下午應(yīng)用技術(shù)模擬題14 ································313

信息安全工程師下午應(yīng)用技術(shù)模擬題15 ································314

第4章 信息安全工程師下午應(yīng)用技術(shù)答題紙································ 315