移动支付系统安全合规性检测与分析方法研究  

RESEARCH ON METHOD OF SECURITY COMPLIANCE DETECTION AND ANALYSIS FOR MOBILE PAYMENT SYSTEM

作　　者：周宇[1] 柴洪峰[2] 何朔[2] 廖健[1] 

机构地区：[1]复旦大学计算机科学技术学院网络与信息安全研究所,上海200433 [2]中国银联股份有限公司电子支付研究院,上海201201

出　　处：《计算机应用与软件》2012年第10期294-299,共6页Computer Applications and Software

摘　　要：介绍移动支付业务的发展现状和移动支付系统安全合规性检测的重要性,研究相关安全标准对信息系统安全合规性检测的要求,重点从基于系统日志信息、基于网络通信信息和基于系统配置三个方面描述合规性检测分析方法。在此基础上设计移动支付系统安全合规性分析与自动化检测模型,提高检查结果的准确性和合规性,有利于移动支付系统的持续安全运维。In this paper the status quo of the development of mobile payment business and the importance of security compliance detection of mobile payment system are introduced. Corresponding security standards on the requirements to infbrmation system security compliance detection are studied. The emphasis of the paper is to describe the compliance detection and analysis methods from three aspects ： the system logs-based, the network communication information-based and the system configuration-based. According to these, a security compliance analysis and automatic detection model for mobile payment system is designed, which improves the accuracy and compliance of the detection outcomes, and this helps the sustained secure operation of the mobile payment system.

关 键 词：移动支付 安全标准 合规性检测 系统日志信息 网络通信信息 系统配置 

分 类 号：TP302.1[自动化与计算机技术—计算机系统结构]