信息系统安全需求分析方法研究

1 引言在人类社会的发展和生存越来越依赖于信息的今天,信息系统已成为人们用于产生、传送、使用、管理信息的主要工具和手段。然而,随着计算机和通信网络技术的飞速发展,信息系统的安全保密问题也日益突出和复杂化。怎么才能确保信息系统的有效性和安全性,已经成为社会普遍关注的重点问题。为此,在新信息系统的构建以及旧信息系统的维护和扩

Approaches for Security Requirements Analysis of Information Systems

Security requirements analysis is a precondition to provide effective and appropriate safeguard for information systems. Based on the existing theories and approaches .this paper discusses the categories and analysis procedure of security requirements in information systems. And according to the basic steps of security requirements analysis,the security hazard analysis model and the security risk analysis model are presented here. At the end,the methods of security requirements specification and the corresponding improvements are also introduced.