信息系统安全评估理论及其关键技术研究

《信息系统安全评估理论及其关键技术研究》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、分类号UDC工学博士学位论文学号Ql§!塑Z密缎垒匠信息系统安全评估理论及其关键技术研究博士生姓名型羞学科专业盐篡扭整堂量垫查研究方向焦蛊塞垒指导教师三壹墓熬援国防科学技术大学研究生院二Oo五年四月里堕型兰垫查查兰竺至兰堕芏篁堡苎ABSTRACTWiththecomingofInformationAge，mankind’sdesireforinformationsystemsecurityhasincreasedtremendously,Itwillbemeaningfultogiveananswerabout‘how’secureaninformationsystemis

2、．Moreover,inarapidlyglobalizingandincreasinglyuncertainworld，takingcorrectsecurityevaluationanddecisionsbecomesessentialforsurvivaloftheorganizationorindeedofthenation．Butuserscannotbeexpectedtoknowexactlywhetherthesecuritypropertiesoftheinformationsystemtheyusereallyfulfilltheirrequiremen

3、ts．111eimpartialandcompetentsecurityevaluationoftheinformationsystemisneeded．Despitemanysecurityevaluationmetricsoutthere，nonehasbeenapprovedwidely．Tograspthesenewchallenges，thefieldofsecurityevaluationitselfhastodevelopandbecomemorepracticalandrelevantontheneedsoftheday,Therefore，thisthes

4、is’Spurposeistodescribeauthor’Sinitialresultsofresearchinsecurityevaluationtoimprovetheperformanceofsecurityevaluationforinformationsystem．ThecurrentachievementsofresearchininformationsecurityevaluationareassuchassecurityevaluationcriteriaandmethodsbothinlandandoverseashavebeenstudiedinCha

5、pter1、InChapter2，theproblemsthatshouldbestudiedinsecurityevaluationofinformationsystemhavebeendemonstrated．Andtheresearchframeworkofthisthesisisbroughtforward．Theauthorhasbeenengagedintheresearchonsecurityevaluationmethodofinformationsystemandproposesanoperationalevaluationmethod-ISSUE(Inf

6、ormationSystemSecUrityEvaluation)．AlsoinChapter3，thedesignandimplementationofsecurityevaluationaidsystem-SEASbasedontheproposedISSUEisgiven．AssessingriskiSonekeyelementofabroadersetofsecurityevaluationactivities．Althoughallelementsofthesecurityevaluationareimportant，riskassessmentsprovidet

7、hefoundationforotherelementsoftheevaluationcycle，Asriskprobabilityisakeyfactorofrisk．estimationofriskprobabilityisa11unavoidablechallenge．InChapter4theauthorputforwardariskprobabilityassessmentmodelandproposedanestimatorofriskprobabilitybasedhistoricaldata，One