信息安全保障体系研究——以数字化教育部考试中心为例

教育部考试中心在"十一五"期间将建设"数字化教育部考试中心",对信息安全保障提出了更高的要求。本文通过对信息安全风险的分析,提出了划分安全域、建立安全域之间的联系、实施整体安全管理的安全体系构建思路,并设计了包括用户、应用、系统、数据、网络直至物理各层在内的安全技术措施和管理手段的、多层次的整体信息安全保障体系。

Research on Information Security Architecture of Digital Examinations Authority

National Education Examinations Authority will build"digital Examinations Authority"during the"11~(th)five-year plan",which put more higher requirements on information security.Based on security risk analysis,this paper presented an information security architecture building method,which include security domain distinction and association analysis,performing information security management measures as a whole. Furthermore,it designed a multilayered information security architecture including user,application,system, data,network and physical layers' technical and management control means.