信息系统安全风险评估综述

随着信息技术和网络技术的飞速发展,国民经济、社会生活的各个方面对信息系统的依赖程度越来越高,安全问题也日益凸显.信息系统安全风险评估作为衡量系统安全性的重要手段,为信息系统的建设和管理决策提供了重要依据.本文对信息系统安全进行了定义,并与信息安全加以区别.描述了风险评估的模型,按照定量分析和定性分析方法介绍了典型的评估方法并做了具体的比较.最后探讨了当前我国信息系统安全风险评估中存在的问题及发展方向.

Summary of Information System Security Risk Assessment

With the rapid development of information technology and network technology,the dependence of national economy and social life on information system gets higher and higher,and its security problem becomes increasingly distinct.As an important means to determine the security of information system,information system security risk assessment has provided an important basis for the construction of information system and for the decision making of management.This paper gives a definition of information system se...