网站可信身份与系统安全评估  

Trusted Identity and System Security Assessment of Website

作　　者：许东阳[1] 胡影[1] 叶润国[1] 

机构地区：[1]中国电子技术标准化研究院

出　　处：《信息技术与标准化》2017年第5期19-22,共4页Information Technology & Standardization

基　　金：国家重点研发计划项目"网络可信身份管理技术研究";编号:课题三2016YFB0800503/课题四2016YFB0800504

摘　　要：介绍了国内外可信网站和系统安全评估的背景与机构,以及我国正在制定的国家标准《信息安全技术网站身份和系统安全要求与评估方法》,研究了评估类别、评估分级、评估方法与流程、评估结果展示与撤消等网站可信评估内容与流程,为建立我国网站的可信身份与系统安全的评估机制提供参考。This paper introduces the background and institutions at home and abroad of trusted sites and system security assessment, as well as our country＇s developing national standard ＂information security technology identification and safety requirements and evaluation methods of website＂, study the evaluation category, classification, evaluation method and evaluation process, evaluation results show with the content and process of cancellation, in order to provide reference for the establishment of China＇s website trusted identity and system security evaluation mechanism.

关 键 词：网站 安全评估 可信身份 系统安全评估 

分 类 号：TP393.092[自动化与计算机技术—计算机应用技术]