基于确保案例模型的网络边界测评模板化  

The template of network boundary evaluation based on assurance case model

作　　者：吴志国[1] 沈熠[1] 汤淇 张玉军 

机构地区：[1]上海大学计算中心,上海200444 [2]上海大学计算机工程与科学学院,上海200444 [3]苏州裕茂机电工程技术有限公司,江苏苏州215000

出　　处：《微型机与应用》2016年第24期1-4,7,共5页Microcomputer & Its Applications

摘　　要：袁文浩等人提出了根据《信息系统安全保障评估框架标准》将等级保护要求作为分论断建模的理论。本文在此基础上,依据等保测评工作的经验和技术搜集,增加了最底层分论断到直接证据的建模,完成了基于确保案例模型的网络边界测评的建模,并创造性地提出了将网络边界测评工作模板化的方法,将测评工作分为技术检查、访谈和文档确认工作,给出了3个模板表,进一步拓展了等保测评发展的思路。Yuan Wenhao and others have put forward the modeling theory that sub-claims are based on requirement for classified protection ac- cording to＂ The evaluation framework standards for information systems security＂. According to the experience and technology of classification protection assessment work, this article raises the modeling from the bottom sub-claims to the direct evidence and completes modeling of net- work boundary evaluation based on assurance case model. It also puts forward the method of the template of network boundary evaluation crea- tively. The assessment work is classified into technical inspection, interview and document confirmation with this method. At last, three tem- plate tables are given out. It expands the development way of information security classification protection evaluation.

关 键 词：等级保护 网络边界测评 确保案例 模板 

分 类 号：TP23[自动化与计算机技术—检测技术与自动化装置]