国家安全机关近日披露了涉密设备报废处理中存在的严重安全隐患。1某单位的服务器在被弃用后仍然留存于机房内，被境外间谍情报机关通过网络扫描成功入侵，随后被控制作为跳板开展网络窃密活动。1此外，二手硬盘中残留了多家党政机关和高校的内部文件，相关人员还通过技术手段还原了硒鼓残留的打印内容，将涉密信息售往境外。1
这些泄密事件反映出报废环节在管理中存在的深层问题。国家安全机关指出，报废环节因关注度降低、管控力度弱化而滋生多类失泄密风险。1一些涉密岗位工作人员存在认知误区，认为"删除即销毁、格式化即清零"。1为堵住这一漏洞，有关部门强调涉密存储介质必须一律交由具备国家保密资质的定点单位销毁，1并建立"双人监销、全程留痕、归档备查"的监管机制。1国家安全机关表示需要通过健全台账、前置审核、压实责任等措施守好报废处置的"最后一关"。1
China's national security authorities have disclosed serious security vulnerabilities in the disposal of classified equipment, exposing multiple cases where outdated hardware became vehicles for espionage and data theft.1 The security gaps emerge during the decommissioning phase, where reduced oversight and weakened controls create conditions for various information leakage risks.1
In one documented case, a discarded server left in a data center by a government unit remained accessible to foreign intelligence agencies, which discovered it through network scanning, gained control, and subsequently used it as a springboard for cyberattacks and theft operations.1 Beyond network intrusions, the authorities identified instances where sensitive data persisted on second-hand hard drives sourced from multiple government agencies and universities, and where individuals used technical methods to recover classified printing materials from used toner cartridges and sold the information abroad.1
The root causes of these vulnerabilities include incomplete equipment registries, non-standard disposal procedures, and inadequate supervision.1 According to the authorities, a critical misconception exists among some classified-information handlers who believe that file deletion and drive formatting are sufficient to destroy sensitive data.1 To address these risks, the authorities recommend establishing clear equipment inventories, implementing pre-disposal reviews, and ensuring accountability.1 All classified storage media must be destroyed exclusively by organizations holding national secrecy qualifications, with protective measures including dual-person monitoring, complete documentation trails, and archival records.1
评论
还没有评论，欢迎留下第一条。