基于面向对象的信息系统风险评估方法

风险评估是信息系统安全保证的核心和关键。对现有的风险评估方法进行分析评价，将面向对象的系统分析思想引入信息系统的风险评估中，完善了系统风险评估方法。能够在信息系统建设初期确定系统中关键的、高风险组件或子系统，可有效指导系统安全防护工作的经济高效开展。

Object-oriented based method of information system risk evaluation

To implement information system safety defense，risk evaluation is the core and key step.This article analyzes and estimates existing information system evaluation methods and brings the notion of object-oriented based system architecture decomposing into information system risk evaluation methods，and consummates the existing methods.The method in this paper can confirm the key and high-risk components or sub-systems of a information system in initial building stage and instruct its later safety defense work efficiently and economically.