公安交管类移动应用软件安全测评指标研究  

Research on Security Assessment Indicators of Traffic Management Application Software

作　　者：华莎 张昊[1] 封正 雍成明[1] HUA Sha;ZHANG Hao;FENG Zheng;YONG Chengming(Traffic Management Research Institute of the Ministry of Public Security,Wuxi 214000,China)

机构地区：[1]公安部交通管理科学研究所

出　　处：《中国公共安全（学术版）》2019年第4期98-102,共5页China Public Security(Academy Edition)

基　　金：中央级公益性科研院所基本科研业务,等保2.0下的公安交通管理移动应用软件安全测评指标和方法研究(项目编号:2019SJA06)

摘　　要：随着移动互联技术与移动互联网的不断普及,许多行业开始布局以移动应用软件为典型的移动互联网产业,随之带来了安全威胁,而移动应用软件安全测评在信息安全测评领域尚处于起步阶段,公安交管类移动应用软件安全测评方面缺乏指导性评估准则和方法。本文分析了公安交管类移动应用软件安全评估现状,从源代码安全、组件安全、数据安全、应用安全四个层面,提出了移动应用软件客户端安全测评指标,为移动应用软件客户端安全的测评提供了测评依据,后续的测评方法的研究指明了方向。With the continuous popularization of mobile internet technology and mobile Internet,many industries have begun to deploy mobile Internet software and mobile Internet industry,which brings security threats.However,mobile application software security assessment is still in its infancy in the field of information security assessment,and there is no guiding assessment criteria and methods for the security assessment of public security traffic management applications.This paper analyzes the current situation of security assessment of mobile application software for public security traffic management.From the factors of source code security,component security,data security and application security,this paper proposes the security evaluation index of mobile application software client.It provides a basis for evaluation of mobile application client security assessment,and points out the direction for the subsequent evaluation method research.

关 键 词：公安交管 应用软件 客户端 安全测评指标 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]