| 军工行业信息系统安全风险分析与评估 |
| |
| 引用本文： | 苏景志,田新广.军工行业信息系统安全风险分析与评估[J].信息安全与通信保密,2010(1):64-66,69. |
| |
| 作者姓名： | 苏景志 田新广 |
| |
| 作者单位： | 1. 工业和信息化部信息中心,北京,100804
2. 北京变通大学计算技术研究所,北京,100029 |
| |
| 摘 要： | 安全风险评估是信息系统安全工程的重要组成部分,是建立信息系统安全保障体系的基础和前提。文中对军工行业信息系统安全风险评估的主要内容、关键环节和评估准则进行了阐述,并结合实际风险评估工作给出了风险评估的基本方法和经验性策略,最后对军工行业信息系统的典型安全威胁和系统脆弱性进行了分析和归纳。
|
| 关 键 词： | 信息系统 风险评估 安全威胁 系统脆弱性 |
Security Risk Analysis and Assessment of Information Systems in War Industry |
| |
| SU Jing-zhi,TIAN Xin-guang.Security Risk Analysis and Assessment of Information Systems in War Industry[J].China Information Security,2010(1):64-66,69. |
| |
| Authors: | SU Jing-zhi TIAN Xin-guang |
| |
| Affiliation: | SU Jing-zhi1,TIAN Xin-guang2 (1Information Centre of Ministry of Industry & Information Technology,Beijing 100804,China,2Institute of Computing Technology,Beijing Jiaotong University,Beijing 100029,China) |
| |
| Abstract: | Risk assessment is very important for security assurance of information systems in war industry. The main contents, key technologies and principles of security risk assessment are described in this paper. Then, the basic methods and some practical advice on risk assessment and threat analysis for different kinds of information system are presented. Finally, the typical security threats and vulnerabilities of information systems in war industry are analyzed and summarized. |
| |
| Keywords: | information system risk assessment security threat system vulnerability |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
