资源描述:
《金融行业信息科技系统安全性评估平台的设计与实现》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、TheDesigningandCarryingoutoftheSecurityEvaluatePlatformofInformationTechnologySysteminFinanceIndustryGraduateStudent..XicXinAdviser:HeJunYang删mTogetherwithOllrcountry'sgrowingu-圮onomy,the石珑m∞jndl塔町hasenteredawholenewreformingperiod;nevertheless,theindustryisalsof
2、acinginoreandmorcthreatsontheirinformationsystem.Informationisanassetthat,likeotherimportantbusiness碰圈瓶isessentialtothebusinessofallorganizationamlconsequentlyneedstObecarefullyprotected.Thisisespeciallyimportantintheincreasinglyinterconnectedbusinessenvironment.
3、Asaresult,informationisnOWexposedtoagrowingnumberandawidervarietyofthreatsandvulnerabilifics。WeneedasecurityEvaluationPlatformofInformationTechnologySysteminFinanceIndustrytOprotectthel丘
4、lalleesystem.ISO/IEC17799isallextremelycomprehensiveanddetailedstandard.Comp
5、liance,therefore,willrequirebothamethodicalandmeasuredapproach.Itwillalsorequirecommitment,aswellasaCCeSStoappropriatetoolsandproducts.ISO/IEC17799hasbeenacceptedbyourgovernmentas∞fnationalstandard:GBIT19716-2005,Thisarticleestablishesallinformationsystemsecurity
6、evaluationplatformbasedonISO/IEC17799.Thisplatformismadeupoftwoparts:Thefirstpartisaboutsecurityregulationbasedonbothourcountry'srealityandtheISO/IEC17799,secondpartconcemssecurityevaluationsoftware,whichwillputpartoneintopractice.Themainresearchesare笛follow:1●Th
7、erequirementAnalysisofS∞uri够Regulation7requirementsinsecuritya把toberaised,throughtheanalysisofagreatdealofinformationinthesecuritystructureofourcountry,esp.accordingtothedemandofpractice.Theyate.systemmanagement,applicationsoftwaremanagement,networkmanagement,ser
8、vern]anageme咄softwaredevelopingmanagement,equipmentandenvironmentmanagement,safetyproducingandcomprehensivemanagemenLRealizingofSeenrityRegulationAccordingtotheISO/IEC17799andthedemandofcompaniesinreality,thesecurityregulationistoberaised,including:securityregula
9、tion,organizationsystem,thesortingandcontrollingofcapital,personnelsafety,equipmentandenvironmentsecurity,operationandcommunicationmanagement,visitingcontrol,s