基于标准的系统安全测试指标体系的研究

Research On Criterion-based Operating System Security Test And Evaluation Index System

本文从操作系统的安全功能出发,结合CC标准的测评原理,按照威胁、安全目的、系统安全功能组件和具体指标的顺序,提出一套系统安全测试的全面的指标体系,该指标可根据需要运用层次分析法进行定性或定量的风险评估。

According to the security function of operating systems and the test and evaluation rational of CC,the paper gives a set of index system for the security test and evaluation of operating system.The index system is research in sequence of threat,security ob-jectives, components of system security function and index.The index can be used to execute quantificationally or qualitatively risk e-valuation with AHP(The Analytic Hierarchy Process) as you need.