摘要
本文在信息系统风险分析中 ,采用系统安全工程能力成熟模型作为理论依据 ,构造出基于模型的风险评估指标体系 ,并运用模糊评判方法评估了系统的风险程度。
This article applied the Systems Security Engineering Capability Maturity Model in the information system risk analysis. According to this model,the article constructs an effective and based on model risk evaluation standard system in application. Finally the article gives method of the fuzzy evaluation of risk degree.
出处
《管理工程学报》
CSSCI
2001年第4期58-60,共3页
Journal of Industrial Engineering and Engineering Management
基金
国家863信息安全应急计划资助 ( 86 3-30 1-7-8)
关键词
信息系统
系统安全工程能力成熟模型
风险评估
information system
systems security engineering capability maturity model
risk evalation
