|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2006年10 期
| 標(biāo)題 |
| 鐵路設(shè)計(jì)院信息安全風(fēng)險(xiǎn)評(píng)估實(shí)踐(28 卷) |
| 英文標(biāo)題 |
| Practices on Information Security Risk Evaluation of Railway Design Institutes |
| 摘要 |
| 針對(duì)鐵路設(shè)計(jì)院對(duì)信息系統(tǒng)安全風(fēng)險(xiǎn)評(píng)估的要求，提出風(fēng)險(xiǎn)評(píng)估的準(zhǔn)備工作和風(fēng)險(xiǎn)評(píng)估的原則。根據(jù)鐵路設(shè)計(jì)院的實(shí)際需求，將信息安全風(fēng)險(xiǎn)評(píng)估過程分為:確定評(píng)估范圍;資產(chǎn)識(shí)別與賦值;威脅評(píng)估;脆弱性評(píng)估;風(fēng)險(xiǎn)分析和風(fēng)險(xiǎn)管理 6個(gè)階段。最終根據(jù)風(fēng)險(xiǎn)評(píng)估報(bào)告，形成安全解決方案。 |
| 作者 |
| 新聞作者:周元德，董鳳翔，胡 波 |
| 關(guān)鍵字 |
