业务过程元素安全目标分析方法  

Analysis on security objectives of business process elements

作　　者：余志伟[1] 唐任仲[1] 

机构地区：[1]浙江大学现代制造工程研究所

出　　处：《浙江大学学报（工学版）》2007年第8期1244-1248,1270,共6页Journal of Zhejiang University：Engineering Science

基　　金：国家"863"高技术研究发展计划资助项目(2003AA414045);浙江省制造业信息化工程重大科技攻关资助项目(2003C11010)

摘　　要：为了确定业务过程的安全需要,提出一种业务过程元素(BPEs)的安全目标分析方法.该方法依据业务过程模型,通过对BPEs安全目标赋予初始值,根据活动的出度和入度确认活动安全目标加权系数;同时还提出了BPEs安全目标一致性检验规则和修正原则,据此检验和修正BPEs安全目标初值,最终确定BPEs的安全目标值.案例研究表明,以BPEs所支持的业务过程为根本,该方法能够客观地确定BPEs安全目标,为更具针对性地保护信息系统提供指南.A method of analyzing security objectives of business process elements（BPEs） was presented to determine the security requirements of business processes.According to the business process model,the initial security objectives of BPEs were identified based on a general classification.And the weighting coefficients of the security objectives of activities were affirmed by calculating the in-degree and out-degree of activities.The consistency checking rules and revising principles were brought forward to check and modify the security objectives,the final security objectives of BPEs were obtained.A case study showed that the proposed method could be used to get the security objectives of BPEs objectively.

关 键 词：业务过程元素 安全目标 一致性检验 信息系统 

分 类 号：F270[经济管理—企业管理] TP309[经济管理—国民经济]