基于SSE-CMM的信息系统安全风险评估方法研究

Research on Evaluation Method of Information System Security Risk Based on SSE-CMM

通过对信息系统风险的分析,在SSE-CMM模型的指导下,提出了一种风险评估的组合计算方法,该方法在一定程度上克服了传统信息系统风险评估的片面性和随机性,提高了信息系统风险分析的精确度。应用结果表明,该方法简单、实用、效果较好。

Based on SSE-CMM, by using risk analysis, the parer gives the method of applying combination computing to the information system's risk. To a certain extent, this method overcomes the unilateralisn and randomicity of the traditional method and improves the accuracy of the risk analysis.The applying outcomes show that this method is simple, utility and has good result. ;;