信息安全评价准则研究综述与探讨

Research and Development of the Information Technology Security Evaluation Criteria

1.简介 现实生活离不开安全,信息系统也一样,信息安全可以说是信息系统的一种属性.从70年代开始,对信息安全系统和安全产品的研制日益得到了政府和市场的重视.但是,对于某个厂商所提供的一个安全系统或产品,人们根据什么来相信它是安全的?

Information technology security evaluation criteria are the navigation mark for information security technology and the activator for the market of secure information products or systems. The origin and development history of information technology security evaluation criteria are surveyed, the achievement and flaws of these criteria are analyzed, and several important problems related to security criteria are discussed. Lessons gotten from the development and further directions are proposed.