Abstract: On the basis of combing the security problems of key information infrastructure in Hubei province, combining the grade evaluation report to reflect the main problems and suggestions for rectification, and according to the research ideas of constructing security architecture, the technical strategies including strengthening online security product protection strategy, adding redundant network key nodes and seamless access of security products to the current network are adopted to carry out phased rectification step by step. The results show that the application of various techniques solves the problem of missing redundant design of WAN nodes in the key information infrastructure of Hubei province, and alleviates the irregular situation that the login address of core network equipment and server is not uniform, the password complexity and the periodic replacement are difficult to implement. Through the grade evaluation and risk assessment of the evaluation organization, the safety protection grade requirements and standards of the key information infrastructure in Hubei province are gradually related, and the safety protection ability is improved year by year.

Key words: security level protection assessment, critical information infrastructure, IRF, HRSP, VPC