欢迎来到天天文库
浏览记录
ID:36352089
大小:5.86 MB
页数:87页
时间:2019-05-09
《基于SOX权限与资源控制模型的研究》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、上海交通大学硕士学位论文基于SOX权限与资源控制模型的研究姓名:张建宏申请学位级别:硕士专业:计算机应用技术指导教师:张忠能20090115ARESEARCHONACCESSANDRESOURCECONTROLMODELCOMPLYINGWITHSARBANES-OXLEYACTABSTRACTSOXActistheabbreviationofSarbanes-OxleyAct.Itisanacttoenhancecorporation’scontrol,leveragegovernancelevelandhelpinves
2、torstorebuildtheirconfidenceforthemarket.Theterm302and404needthecooperationandadaptationofinformationsystems.IntheITgovernancestandards,COSOandCOBITarethemostacceptedandstandardizedassessmentstandard.ThisessaystartsfromthepointsmentionedaboveandfocusonSOX’simpactan
3、drequirementoncorporateinformationsystem’saccesscontrolandresourcemanagement.ThenitanalyzesthefunctionandrequirementtocomplywithSOX.Finally,theessayconcludeswithSOXComplier,whichisdesignedforSOXcomplianceundertheSOAframework.SOXCompliercombinesaccessanalysisandaudi
4、tmonitoringfunctions.ItprovidessystematiccomponentsforinformationsystemsandmanagementstaffswithincorporateandhelpscorporateinformationsystemtoleveragesecurityandefficiencyandlowertheSOXCompliancecostthoughwhichcorporatecouldcomplywithSOXfasterandbetter.KEYWORDS:Sar
5、banes-OxleyAct;InformationSystem;AccessControl;SOA;SOXComplier;CooperationCompliance;–3–图片目录图1SOX对企业的影响·······················································································8图2SOX法案302条款和404条款························································
6、·········13图3COSO框架的五个控制要素······································································16图4COBIT三维控制模型················································································18图5COSOCOBIT结合模型·························································
7、····················20图6萨班斯法案遵循流程··················································································23图7企业服务总线ESB·····················································································36图8某企业现存信息系统结构·····································
8、·····································38图9基于角色的访问控制基本思想··································································40图10三种访问控制模型之间的关系·······
此文档下载收益归作者所有