信息安全风险评估的定量与定性分析方法  

The Methods of Quantitative Analysis and Qualitative Analysis of Information Security Risk Assessment

作　　者：刘曼华[1] 刘萍[2] 

机构地区：[1]周口师范学院,河南周口466001 [2]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《电脑知识与技术》2006年第4期53-55,共3页Computer Knowledge and Technology

摘　　要：在信息安全领域,对信息系统进行风险评估十分重要,其最终目的就是要指导决策者在“投资成本”和“安全级别”这两者之间找到平衡,从而为等级优化的资产风险制定保护策略和缓和计划。本文基于BS7799的结构特点阐述了定性与定量的分析方法在风险评估过程中的应用。In the realm of the information security, It is very important to carry the risk assessment to the information system. Its ultimate goal is to guide clecission maker finding a balance between ＂investment cost＂ and ＂safe class＂, in order to establish the protection strategy and alleviating plan for the risk of high quality assets. This these based on the characteristics of BS7799＇ s structure elucidates the applications of the methods of quantitative analysis and qualitative analysis in the field of risk assessment.

关 键 词：信息系统 风险评估 定量分析 定性分析 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]