教育信息系统的信息安全状况分析  

Analysis of Information Security of Education Information System

作　　者：郑兢 江小剑 倪栋 侯文艳 ZHENG Jing;JIANG Xiaojian;NI Dong;HOU Wenyan(Xiamen Products Quality Supervision&Inspection Institute,Xiamen,China,361004;College of Computer Science and Techology,Huaqiao University,Xiamen,China,361004)

机构地区：[1]厦门市产品质量监督检验院,福建厦门361004 [2]华侨大学计算机科学与技术学院,福建厦门361004

出　　处：《福建电脑》2019年第11期29-34,共6页Journal of Fujian Computer

基　　金：教育信息系统的安全认证制度建设(No.19CNIC01-6221)资助

摘　　要：本文探讨了教育信息系统的信息安全现状及特点,分析了高校信息系统面临的主要问题,给出了风险评估的范围划定和量化方法,并通过实际案例分析,阐明了所面临的风险和应对措施。最后通过应用措施前后结果对比,证明了采用这种量化方法,能使本文给出的应对措施有据可循,有理可依。This paper discusses the characteristics of the information security status of educational information systems, analyzes the main problems faced by university information systems, gives the definition and quantification methods of risk assessment according to the security challenges and its own characteristics and illustrates the risks and countermeasures through the actual case analysis. Finally, through the comparison of the results before and after the application of the measures, it is proved that the adoption of this quantitative method can make the measures given tenable and reasonable.

关 键 词：教育网络 信息安全 风险评估 风险量化 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.18[自动化与计算机技术—计算机科学与技术]