一种基于安全域的网络信息系统安全性评估方法  

A Security Domain- based Method for Security Evaluation of Information System

作　　者：罗俊[1] 

机构地区：[1]卫士通信息产业股份有限公司,四川成都610041

出　　处：《通信技术》2014年第2期210-214,共5页Communications Technology

摘　　要：针对大型网络信息系统的安全问题,提出了一种基于安全域的安全性评估方法。首先,基于安全域的划分原则将网络信息系统按照其所维护的数据类型和所承担的业务功能类别划分为六个安全域,并以电信运营商MBOSS系统为例进行了基于六大安全域的划分。然后,介绍了层次分析法AHP的基本数学原理,建立了电信运营商MBOSS系统的多级层次化结构模型。最后,讨论了基于该模型采用AHP方法对信息系统进行安全性评估的过程。This paper presents a security evaluation method based on security domain for large-scale net- work information system. Firstly, based on the dividing principle of security domain, according to the data types and business functions, and with MBOSS system as an example, the information system is divided in- to six security domains. Then, the basic math theory of AHP is described and the muhilayered hierarchy architecture model of MBOSS system established. Finally, how to evaluate the security of the information system by AHP method and the model established above are discussed.

关 键 词：安全域 安全评估 层次分析法 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]