加强密码标准化建设,提高信息安全防御能力  

To Strengthen the Construction of Code Standards and Improve the Defense Capability of the Information Security

作　　者：梁珈 罗干生 王惠君 唐松 

机构地区：[1]湖南省密码管理局,湖南长沙410001 [2]中安信息安全工程研究中心,湖南长沙410001

出　　处：《电脑与信息技术》2014年第6期45-47,共3页Computer and Information Technology

基　　金：湖南省科技计划专项(项目编号:2013FJ4139)

摘　　要：信息安全标准化工作对于解决信息安全问题具有重要的技术支撑作用,一个国家的安全标准,意味着这个国家在信息技术领域的技术主权,深刻制约着这个国家的安全产品的研发、生产、测评和使用。信息安全标准化工作是一项艰巨、长期的基础性工作。商用密码测评标准体系作为信息安全保障体系中十分重要的技术体系,其建设意义不言而喻。文章结合我国商用密码政策需求,阐述了标准化的重要性。同时针对商用密码应用行业现状和商用密码标准化存在的问题进行了仔细分析,给出了商用密码测评标准体系建设对策。Information security standardization work has an important technical support for solving the problem of information security, the safety standards of a country, means that the national sovereignty in the field of IT technology, deeply restrict the right of the country＇s security products research and development, production, test and use. Information security standardization is the groundwork for a difficult and long-term. Evaluation standard system of the commercial passwords as information security protection system is very important technical systern, the construction of meaning is self-evident In this paper, according to the requirements of information security policy in China, we expounds the importance of standardization of password At the same time, according to current situation of the commercial passwords application and the problems existing in the standardization of information security, we has carried on the careful analysis and gives the corresponding countermeasures and suggestions.

关 键 词：标准化 商用密码 信息安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]