基于SSE-CMM模型的信息系统安全工程管理

Management of info-security engineering based on SSE-CMM model

通过对目前信息系统建设中安全工程现状的分析 ,总结出信息系统存在的几大安全问题 ,从而有针对性地引入SSE CMM模型 ,通过对模型的介绍阐述了如何在模型指导下进行信息系统安全工程管理 .最后给出在模型的基础上制定安全基线的方法 .实践证明采用这种过程控制的方法来指导信息系统安全工作 ,有针对性地解决了信息系统安全的动态性和广泛性 .

By analyzing the current situation of engineering in present information system construction, this paper sums up several main security problems of the information system and introduces the SSE-CMM model aiming at these problems. It also makes an exposition of how the information system security engineering management works by introducing the SSE-CMM model and presents a method of making security base line on the base of the model. Actual situation shows that the application of this proceeding control method guides the information system security and solves the information system security's dynamic extensive character.