IS风险评估方法分类研究  

IS risk assessment methodologies research and development trend overview

作　　者：吴迪[1] 陈晓桦[1] 李斌[1] 郭涛[1] 

机构地区：[1]中国信息安全产品测评认证中心 认证与注册部,北京100089

出　　处：《计算机应用研究》2007年第9期55-57,共3页Application Research of Computers

基　　金：国家"863"计划资助项目(2005AA142150)

摘　　要：尝试分别从信息技术演化过程和驱动因素两个方面对信息系统风险评估方法(ISRAM)进行分类。首先选择信息技术和ISRAM发展的时间主线划分ISRAM,然后提取ISRAM设计实现过程中考虑的驱动因素划分ISRAM,并分别给出两种分类方法的半形式化描述;最后,分析目前ISRAM面临的挑战和未来发展趋势。This paper tried to put forward some ideas about information systems risk assessment methologies（ISRAM） classification in both information technologies evolvement progress and driven factors of the implementation of ISRAMs. Firstly, this paper selected the information technology and their development with time threads classify ISRAMs. Secondly, abstracted threes driven factors during the designing and implementation of ISRAMs to classify them. And then described each classification method in semiformal way. Lastly, analyzed challenges faced by ISRAM researching and development trends in the future.

关 键 词：信息系统风险评估方法 分类方法 演化过程 驱动因素 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]