二次系统安全体系结构化设计方法

在二次系统安全体系设计工作经验的基础上，借鉴DGSA模型和MOAT方法的优点，利用面向对象的分析建模技术，提出了一种安全体系结构化设计方法。该方法在建立二次系统抽象模型的基础上进行安全风险分析和安全措施配置，目的是促进安全工作组之间的交流，保证对大系统进行安全体系设计的质量。因为该方法主要基于面向对象分析建模技术，而目前面向对象的辅助分析建模工具已经比较成熟，所以该结构化方法为安全体系设计的自动化提供了可能性。

A METHOD FOR THE STRUCTURED SECURITY ARCHITECTURE DESIGN OF SECONDARY SYSTEMS

Based on the experience in the security architecture design of secondary systems, this paper presents a method for structured security architecture design, which draws on the advantages of DGSA and MOAT and makes good use of object oriented analysis and modeling techniques. The method begins with establishing an abstract model for a secondary system, and then performs the security risk analysis and countermeasure configuration, the purpose being to facilitate the communications among security work teams and ensure the quality of security architecture design for large systems. Since it is mainly based on the object oriented analysis and modeling techniques supported by fairly good tools, it provides the possibility for the automation of security architecture design.