安全基线管理在企业中的应用  

Security Baseline Management in the Enterprise Application

作　　者：谌志华[1] 

机构地区：[1]中国软件与技术服务股份有限公司,北京100081

出　　处：《计算机安全》2013年第3期19-22,共4页Network & Computer Security

摘　　要：安全基线是一个信息系统的最小安全保证,即该信息系统最基本需要满足的安全要求。安全基线管理系统通过信息化手段,对安全基线的核查、整改和落实提供了强有力的技术支撑,其自动化、量化评估手段可有效提高安全运维和检查的工作效率。介绍安全基线的定义和内容构建,分析安全基线管理系统的必要性,并对安全基线管理系统进行了设计。Security baseline is an information system of minimum security guarantees,that is the safety requirements of the information system the most basic needs. Security baseline management system through the information means as the strong technical support for the security baseline inspection, rectification and implement. Its automated, quantitative evaluation method can effectively improve the work efficiency of security operations and inspection. The paper introduced the definition and content of the safety baseline building, the necessity of analysis of baseline security management system, and the baseline security management system was designed.

关 键 词：安全基线 自动化采集 安全检查 评估模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]