信息系统安全保障理论与评价指标体系  

Studies on Information System Assurance Theory and Evaluation Indicator Systems

作　　者：吕欣[1] 

机构地区：[1]国家信息中心,北京100045

出　　处：《微电子学与计算机》2006年第10期10-12,共3页Microelectronics & Computer

基　　金：国家杰出青年科学基金项目(60025205);国家自然科学基金项目(60403004)

摘　　要：文章研究了一类四维信息保障(IA)模型,包括IA目标维、IA能力维、IA措施维和IA时间维。重点给出了一个可以测度国家信息保障成熟度的评价指标体系,并给出了各级指标的构成和评价原理。该指标体系包括系统信息保障成熟度指数和基础支撑成熟度指数,适用于对国家信息安全保障体系、基础信息网络和重要信息系统、一般信息系统等的信息安全保障态势进行评价。A four-dimensional IA model was studied in this paper, which includes IA object dimension, IA capability dimension, IA countermeasure dimension and IA time dimension. A metrics system to measure national IA capability maturity was proposed as a key part of this paper. National IA capability maturity indices, which were designed for evaluation of the security status of the national IA system, the national information infrastructure and other information systems, were derived from system assurance indices, IA fundamental environment and infrastructure supporting indices. The construction of the indicators and the elementary evaluation principles were also introduced in this paper.

关 键 词：信息保障体系 信息安全 保障基线 评价指标体系 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]