一种基于STRIDE威胁模型的风险评估方法

Information Security Risk Assessment Approach Based on STRIDE Threat Model

信息系统风险评估是信息安全保障机制建立过程中的重要评价方法和决策机制,已成为国际上考察信息系统安全性的一个重要环节。文中针对信息系统风险评估提出了一种基于威胁模型的评估方法,通过对信息系统中涉及关键资产的数据流构建STRIDE威胁模型来识别威胁,并量化威胁发生的可能性和严重程度,从而进一步评估信息系统的安全风险。

This paper presents an information security assessment approach based on threat model. Through building a STRIDE threat model for the data streams of the information system involving the key assets, the threat is identified, and the probability and seriousness of the threat is quantified, thus to further assess the security risk of the information system.