海洋网络信息安全评估的指标选取和风险评估

摘要

海洋网络的特点决定了其在网络安全评估时的特殊性.根据文件《信息安全技术信息系统安全等级保护基本要求》,对某地海洋局的风险评估要素进行分层,并根据专家打分确定各层评估要素的权重和评估矩阵,最后得出该网络系统总体的安全情况.由于各地海洋业务的一致性和相似性,该评估模型可以通用到其他海洋局网络评估中.%The characteristics of the oceanic network determine its particularity in network security assessment. According to a standard, titled as "Information Security Technology: Information System Security Level Protection Fundamental Requirements" , the paper divides an oceanic administration' s risk assessment factors into layers. Then according to experts' scorings, it determines the weight of assessment factors and assessment matrix for each layer. Finally it obtains the security condition of the whole network system. Due to the consistency and similarity of oceanic businesses in different places, the assessment model can be applied to network assessments for other oceanic administrations.