版本更新提示：信管網(wǎng)《信息安全工程師輔導資料》已更名為《信息安全工程師通關寶典》【點擊查看】

《信息安全工程師輔導資料》由信管網(wǎng)(www.shc2b.com)以最新版信息安全工程師教程和信息安全工程師考試大綱為基礎組織編寫，同時根據(jù)信息安全工程師歷年考試情況進行一定修訂，作為信管網(wǎng)計算機技術與軟件專業(yè)技術資格（水平）考試中的中級信息安全工程師考試培訓輔導資料。

第一部分為綜合知識，內容包括：信息安全工程師綜合知識考點、信息安全工程師習題、信息安全工程師歷年綜合知識考點分析、信息安全工程師英語詞匯、信息安全工程師思維導圖、信息安全工程師考試大綱。

第二部分為應用技術，內容包括：信息安全工程師下午應用技術要求、歷年信息安全工程師應用技術考點分布、歷年信息安全工程師應用技術真題與答案、信息安全工程師下午應用技術模擬題。

注：該輔導資料僅提供給信管網(wǎng)信息安全工程師培訓學員，不單獨出售。

信管網(wǎng)專注軟考考試與培訓服務10余年，信管網(wǎng)中級信息安全工程師培訓課程自信息安全工程師開考便已經開課，培訓出了第一批信息安全工程師人才，信息安全工程師課程由信息安全博士串講課程和信息安全工程師碩士精講課程組成，同時包郵自編內部輔導資料及用品，并組編有自有信息安全工程師題庫。

關于信息安全工程師培訓及試聽請查看： http://www.shc2b.com/aqpeixun.html

信管網(wǎng)《信息安全工程師輔導資料》目錄

（注：請以當年最新版本為準）

第一部分：信息安全工程師綜合知識

第1章 信息安全基礎································8

一、信息系統(tǒng)安全的四個層次································8

二、信息安全法律法規(guī)································9

三、信息安全管理································10

四、等級保護································10

五、網(wǎng)絡隔離································11

六、安全監(jiān)控································11

七、風險評估································12

八、信息安全標準化知識 ································13

九、信息安全基礎思維導圖································14

十、信息安全基礎習題 ································21

十一、信息安全基礎習題答案解析································24

第2章 密碼學基礎與應用································27

一、密碼學的基本概念································27

二、密碼體制 ································28

三、古典密碼 ································28

三、分組密碼 ································28

四、序列密碼 ································29

五、hash函數(shù) ································29

六、公鑰密碼體制 ································30

七、數(shù)字簽名和認證 ································30

八、密鑰管理································ 30

九、密碼學基礎與應用思維導圖 ································32

十、密碼學基礎與應用習題 ································40

十一、密碼學基礎與應用習題答案與解析································ 50

第3章 網(wǎng)絡安全基礎 ································58

一、計算機網(wǎng)絡基本知識 ································58

二、apt簡介································ 60

三、暗網(wǎng)································ 61

四、網(wǎng)絡監(jiān)聽································ 61

五、口令破解 ································61

六、拒絕服務攻擊（dos）································62

七、漏洞攻擊································ 62

八、網(wǎng)絡安全威脅································ 62

九、網(wǎng)絡蜜罐技術 ································63

十、honeynet································ 63

十一、匿名網(wǎng)路（tor）································ 63

十二、網(wǎng)絡備份································ 64

十三、網(wǎng)絡安全防范意識與策略································ 64

十四、桌面用戶上網(wǎng)時可能會遇到的入侵方式································ 65

十五、無線網(wǎng)絡安全································ 65

十六、網(wǎng)絡安全基礎思維導圖································ 71

十七、網(wǎng)絡安全基礎習題 ································92

十八、網(wǎng)絡安全基礎習題答案與解析 ································103

第4章 信息系統(tǒng)安全基礎································ 113

一、計算機安全的定義································ 113

二、物理安全································ 114

三、計算機的可靠性技術································ 114

四、操作系統(tǒng)安全 ································115

五、數(shù)據(jù)庫系統(tǒng)的安全的概念································ 121

六、數(shù)據(jù)庫訪問控制技術 ································121

七、惡意代碼································ 123

八、計算機取證································ 125

九、嵌入式系統(tǒng)安全 ································126

十、智能卡概論 ································126

十一、電力工控系統(tǒng)安全應采用的對策 ································127

十二、信息系統(tǒng)安全基礎思維導圖································ 129

十三、信息系統(tǒng)安全基礎習題································ 146

十四、信息系統(tǒng)安全基礎習題答案與解析 ································151

第5章 應用系統(tǒng)安全基礎 ································156

一、web安全威脅································ 156

二、web威脅防護技術································ 156

三、電子商務安全 ································159

四、信息隱藏 ································164

五、網(wǎng)絡輿情································ 166

六、隱私保護 ································167

七、應用系統(tǒng)安全基礎思維導圖 ································168

八、應用系統(tǒng)安全基礎習題································ 179

九、應用系統(tǒng)安全基礎習題答案與解析································ 182

第6章 網(wǎng)絡安全技術與產品 ································185

一、網(wǎng)絡安全需求分析與基本設計 ································185

二、網(wǎng)絡流量監(jiān)控和協(xié)議分析 ································188

三、網(wǎng)絡安全風險評估實施 ································189

四、網(wǎng)絡安全防護技術的應用································ 194

五、網(wǎng)絡安全技術與產品習題································ 197

六、網(wǎng)絡安全技術與產品習題答案與解析································ 200

第7章 信息系統(tǒng)安全工程································ 203

一、訪問控制 ································203

二、口令猜測技術 ································204

三、hashcat ································205

四、信息系統(tǒng)安全的需求分析與設計原則································ 205

五、目前信息系統(tǒng)安全標準體系 ································208

六、信息系統(tǒng)安全的開發(fā)構建過程································ 208

七、安全信息系統(tǒng)的實現(xiàn) ································209

八、信息系統(tǒng)安全測評 ································210

九、信息系統(tǒng)安全工程習題································ 214

十、信息系統(tǒng)安全工程習題答案與解析································ 216

第8章 應用安全工程································ 217

一、web安全威脅 ································217

二、電子商務安全的需求分析與基本設計································ 217

三、網(wǎng)絡安全································ 219

四、數(shù)據(jù)及支付安全································ 219

五、手機系統(tǒng)的防范措施如下································220

六、應用安全工程習題 ································221

七、應用安全工程習題答案與解析································ 223

第9章 信息安全英語詞匯 ································225

第10章 信息安全工程師上午考點分析································ 229

附錄1  2020年信息安全工程師考試大綱 ································231

第二部分：信息安全工程師應用技術

第1章 信息安全工程師下午應用技術綜述································251

考試大綱中對應用技術的要求 ································251

信息安全工程師歷年應用技術科目真題知識點分布 ································256

第2章 信息安全工程師下午應用技術真題································ 257

2018年信息安全工程師下午應用技術真題試題一與答案································ 257

2018年信息安全工程師下午應用技術真題試題二與答案 ································258

2018年信息安全工程師下午應用技術真題試題三與答案································ 259

2018年信息安全工程師下午應用技術真題試題四與答案································ 261

2018年信息安全工程師下午應用技術真題試題五與答案 ································264

2017年信息安全工程師下午應用技術真題試題一與答案································ 266

2017年信息安全工程師下午應用技術真題試題二與答案 ································266

2017年信息安全工程師下午應用技術真題試題三與答案································ 267

2017年信息安全工程師下午應用技術真題試題四與答案································ 269

2017年信息安全工程師下午應用技術真題試題五與答案································ 271

2017年信息安全工程師下午應用技術真題試題六與答案 ································272

2016年信息安全工程師下午應用技術真題試題一與答案································ 274

2016年信息安全工程師下午應用技術真題試題二與答案 ································275

2016年信息安全工程師下午應用技術真題試題三與答案································ 276

2016年信息安全工程師下午應用技術真題試題四與答案 ································278

2016年信息安全工程師下午應用技術真題試題五與答案································ 279

第3章 信息安全工程師下午應用技術模擬題································ 281

信息安全工程師下午應用技術模擬題1 ································281

信息安全工程師下午應用技術模擬題2 ································282

信息安全工程師下午應用技術模擬題3 ································282

信息安全工程師下午應用技術模擬題4 ································283

信息安全工程師下午應用技術模擬題5································ 284

信息安全工程師下午應用技術模擬題6 ································287

信息安全工程師下午應用技術模擬題7 ································291

信息安全工程師下午應用技術模擬題8 ································293

信息安全工程師下午應用技術模擬題9 ································294

信息安全工程師下午應用技術模擬題10 ································300

信息安全工程師下午應用技術模擬題11································ 303

信息安全工程師下午應用技術模擬題12 ································307

信息安全工程師下午應用技術模擬題13································ 310

信息安全工程師下午應用技術模擬題14 ································313

信息安全工程師下午應用技術模擬題15 ································314

第4章 信息安全工程師下午應用技術答題紙································ 315