基于SOX权限与资源控制模型的研究

《基于SOX权限与资源控制模型的研究》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、上海交通大学硕士学位论文基于SOX权限与资源控制模型的研究姓名：张建宏申请学位级别：硕士专业：计算机应用技术指导教师：张忠能20090115ARESEARCHONACCESSANDRESOURCECONTROLMODELCOMPLYINGWITHSARBANES-OXLEYACTABSTRACTSOXActistheabbreviationofSarbanes-OxleyAct.Itisanacttoenhancecorporation’scontrol,leveragegovernancelevelandhelpinves

2、torstorebuildtheirconfidenceforthemarket.Theterm302and404needthecooperationandadaptationofinformationsystems.IntheITgovernancestandards,COSOandCOBITarethemostacceptedandstandardizedassessmentstandard.ThisessaystartsfromthepointsmentionedaboveandfocusonSOX’simpactan

3、drequirementoncorporateinformationsystem’saccesscontrolandresourcemanagement.ThenitanalyzesthefunctionandrequirementtocomplywithSOX.Finally,theessayconcludeswithSOXComplier,whichisdesignedforSOXcomplianceundertheSOAframework.SOXCompliercombinesaccessanalysisandaudi

4、tmonitoringfunctions.ItprovidessystematiccomponentsforinformationsystemsandmanagementstaffswithincorporateandhelpscorporateinformationsystemtoleveragesecurityandefficiencyandlowertheSOXCompliancecostthoughwhichcorporatecouldcomplywithSOXfasterandbetter.KEYWORDS:Sar

5、banes-OxleyAct;InformationSystem;AccessControl;SOA;SOXComplier;CooperationCompliance;–3–图片目录图1SOX对企业的影响·······················································································8图2SOX法案302条款和404条款························································

6、·········13图3COSO框架的五个控制要素······································································16图4COBIT三维控制模型················································································18图5COSOCOBIT结合模型·························································

7、····················20图6萨班斯法案遵循流程··················································································23图7企业服务总线ESB·····················································································36图8某企业现存信息系统结构·····································

8、·····································38图9基于角色的访问控制基本思想··································································40图10三种访问控制模型之间的关系·······