构件化的信息系统动态再评估模型  

Information System Dynamic Reevaluation Model Based on Components

作　　者：付茂洺[1] 潘磊[1] 

机构地区：[1]中国民用航空飞行学院计算机学院,四川广汉618307

出　　处：《四川大学学报（工程科学版）》2010年第4期97-102,共6页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家自然科学基金资助项目(60879022/F01)

摘　　要：针对传统信息系统风险评估手段缺乏动态的再评估能力,给出了一种构件化的动态再评估模型。将信息系统抽象为构件组合的拓扑结构;将构件的关联归约为独立和协同两种关系;将构件的组合归约为串联和并联两种类型。当系统动态变化时,只围绕变化的构件进行讨论,确定其变化的方式和影响范围,进而对其余构件以及整个系统所受的影响进行评估。实例表明,该模型突破了传统评估的一次性静态局限,实现了基于变化的动态再评估。The component-based model of dynamic evaluation was used to give a dynamic re-evaluation model. This model abstracts the information system to topological and combinational construction,reduces the connection between components into independent and collaborative relations,and the combinational relation of components into serial and parallel connection types. When the system changed,by only discussing the changed components and determining its change manner and impact scope,the rest of the components can be evaluated and the impact on the entire system can be assessed. Examples showed that the model breaks through the limitations of a traditional static one-time assessment and realizes the dynamic re-evaluation based on change.

关 键 词：信息安全 风险评估 构件 再评估 动态评估模型 

分 类 号：TP393.023.5[自动化与计算机技术—计算机应用技术]