系统化的信息安全评估方法

摘要

信息安全评估是保证信息安全保障长效机制的关键.以动态系统控制理论为基础,针对信息系统的信息安全评估问题进行了研究,设计了系统化信息安全保障框架模型,提出了信息安全系统化的评估模型,给出了系统化评估的方法和流程,以为信息系统的信息安全评估打下基础.%Information security evaluation is the guarantee to the effective long-term information security protection. Based on the theory of dynamic system control; this paper emphasized on the system approach of Information security e valuation; presented a framework model for information assurance;and proposed a evaluation model for system approach of information security;dedcribed the procedures of system approach of information security;and provided the hardens to the protect system of information security.