信息技术产品安全可控内涵及其评价指标

The Explanation and of Evaluation Index to Controllability for Security of Information Technology Products

介绍了国内外提升信息技术产品的安全可控水平的主要做法,分析了信息技术产品的安全可控风险,界定了安全可控的概念和内涵。为保障应用方安全可控需求和衡量信息技术产品安全可控程度,提出了信息技术产品安全可控评价指标体系。

This paper introduces the main practices to enhance the level of the controllability for security of information technology products at home and abroad. Analyzes the security risk of information technology products, and explicit the concept and connotation of controllability for security, In order to enstire user＇s requirement of the controllability for security and measure the degree of controllability for secnrity of information technology products, the paper proposes the controllability evaluation index system for security of information technology products