一种用于信息安全的信息保障模型

将一种信息安全(IFOSEC)模型扩展成为一个信息保障(IA)模型，用于指导信息安全研究、工程和教育。新模型包括四维度量：安全目标，信息流状态，安全保障，时间。将信息安全的保护范畴扩大到信息资产，并对可用性、完整性和机密性重新进行了定义，增加了新内涵；采用深度防御概念，在注重技术的同时，突出了人的因素，并强调了安全管理在系统生命期重要作用。时间维的引入，使该模型真正成为动态模型。

A Information Assurance Model for Information Security

In this article an information assurance model extended from information security model is proposed. The new model comprises four dimensions: security goal, information stream states, security assurance, and time. The objects to be protected are extended to both information and assets, and the meaning of confidentiality, integrity and availability is augmented by redefining. It is emphasized that both the people and IT security management are critical. It is a really dynamic model which can be used for information security research, engineering and education.