SSE-CMM研究与实践

Study and Practice of SSE-CMM

系统安全工程能力成熟度模型(SSE-CMM)是一种规范系统安全工程过程的模型。在安全保密系统研发过程中,该模型能最大限度发挥安全保密效能。实际应用中,质量管理人员在已有安全工程开发流程的基础上对SSE-CMM进行改进,并使全员理解、参与和执行。管理者重视并有效地推进过程执行,保证安全工程开发过程的持续改进。自动化管理工具的开发可有效提高SSE-CMM模型的应用,保证安全保密系统的可靠性和高质量。

SSE-CMM is a model for specifying the process of system security project,and the development of security and privacy system based on this model could give full play to the security and privacy effectiveness.In practical application,the quality management personnel make certain improvements on the existing development flow of security project,and let the whole staff understand and implement these improvements.The management personnel lay emphasis on and effectively promote the process implementation,thus to ensure the sustainable improvement of the project development.The development of automatic management tool could effectively enhance the application of SSE-CMM model and ensure the reliability and high quality of the security and privacy system.