科研院所安全信息系统节点风险评价研究  

Research on Node Risk Assessment of Security Information System in Scientific Research Institutes

作　　者：惠建新 娄洪伟[2] 乔德志 HUI Jianxin;LOU Hongwei;QIAO Dezhi(Purple Mountain Observatory,Chinese Academy of Sciences,Nanjing 210023,China;Changchun Institute of Optics,Fine Mechanics and Physics,Chinese Academy of Sciences,Changchun 130033,China;Dalian Institute of Chemical Physics,Chinese Academy of Sciences,Dalian 116023,China)

机构地区：[1]中国科学院紫金山天文台,江苏南京210023 [2]中国科学院长春光学精密机械与物理研究所,吉林长春130033 [3]中国科学院大连化学物理研究所,辽宁大连116023

出　　处：《现代信息科技》2021年第16期153-157,共5页Modern Information Technology

基　　金：中国科学院十三五信息化专项项目(XXH13507-2)。

摘　　要：风险对组织及其资产存在破坏的可能性,它是安全评估的重要因素之一。文章采用定性分析与定量分析相结合的方法进行风险评估,在确定评价对象的基础上,建立一种基于知识的定性分析法,提出风险等级设定和风险防范措施,实践运行证明,该评价体系具有安全性高、稳定性好、易操作、高可靠等优势,可极大提高风险评估效率。Risk has the possibility of damage to the organization and its assets,which is one of the important factors of safety assessment.In this paper,it is the combination use of qualitative analysis and quantitative analysis for risk assessment.On the basis of determining the evaluation object,a knowledge-based qualitative analysis method is established,and the risk level setting and risk prevention measures are put forward.The practical operation shows that the evaluation system has the advantages of high security,good stability,easy operation and high reliability,which can greatly improve the efficiency of risk assessment.

关 键 词：节点风险 信息安全 系统网络测评 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]