复杂信息系统安全保障体系的研究

Research for Security Safeguard System of Complex information System

本文论述了信息系统的表现形态和系统结构，并分析了信息系统面临的安全风险。文中提出了智能型系统安全模型（ Ｉｎｔｅｌｌｅｃｔｕａｌ Ｓｙｓｔｅｍ Ｓｅｃｕｒｉｔｙ Ｍｏｄｅｌ），该模型的公式表示为：安全＝风险分析＋安全策略＋技术防御＋实时监控＋数据恢复＋系统学习＋安全跟踪。针对构建信息系统安全保障体系问题，探讨了模型的使用方式。本文还给出了信息系统安全保障体系的规划方式，构建信息系统安全保障体系实施策略。

This paper discusses the behave form and the system structure of information system and analyses the faced security risk of information system. The paper discusses Intellectual System Security Model. The model can be expressed by Security=Risk Analysis + Security Policy +Technical Defend +Real Time Watch and Control +Data Recovery +System Study + Security Track. In order to construct security safeguard system of information system, the use of the above model be discussed. The paper also presents the layout ...