一种基于安全域的网络信息系统安全性评估方法

针对大型网络信息系统的安全问题，提出了一种基于安全域的安全性评估方法。首先，基于安全域的划分原则将网络信息系统按照其所维护的数据类型和所承担的业务功能类别划分为六个安全域，并以电信运营商MBOSS系统为例进行了基于六大安全域的划分。然后，介绍了层次分析法AHP的基本数学原理，建立了电信运营商MBOSS系统的多级层次化结构模型。最后，讨论了基于该模型采用AHP方法对信息系统进行安全性评估的过程。

A Security Domain-based Method for Security Evaluation of Information System

This paper presents a security evaluation method based on security domain for large-scale net- work information system. Firstly, based on the dividing principle of security domain, according to the data types and business functions, and with MBOSS system as an example, the information system is divided in- to six security domains. Then, the basic math theory of AHP is described and the muhilayered hierarchy architecture model of MBOSS system established. Finally, how to evaluate the security of the information system by AHP method and the model established above are discussed.