摘要
为提高电子政务业务安全,降低电子政务业务活动过程中可能出现的安全风险,文中通过设计电子政务业务安全评估的一般性框架和评估方法,并在该框架和方法指导下,专门针对特定电子政务业务应用进行评估实践,完成了特定电子政务业务各活动的安全评估过程。通过实践表明,业务安全评估这一创新的评估框架和方法,能够有效减少电子政务网站业务的技术、管理过程中的各种风险和脆弱性,以保障一个业务交付的安全。
In order to improve the security situation of E-government services, the general framework and method for e-government security assessment is proposed and designed. Under the guidance of this framework and method, the people could implement e-government business security assessment more systematically. Experiment indicates that this innovative assessment framework and method is very effective and comprehensive. This assessment framework and method could reduce various risks and vulnerabilities in technical implementation and management process of e-government web-site, thus to ensure a well protected e-government services environment.
出处
《信息安全与通信保密》
2012年第8期113-115,共3页
Information Security and Communications Privacy
关键词
政府网站
业务安全
流程评估
e-government
business security
process assessment