基于SSE_CMM模型的信息系统安全工程管理_钱钢.pdfVIP

第32 卷第1期 东南大学学报(自然 科学版 ) Vol.32 No.1 　 2002 年1月 JOURNAL OF SOUTHEAST UNIVERSITY (Natural Science Edition) 　 Jan.2002 　　　　　　 SSE-C 钱　钢　　达庆利 (, 210096) :通过对目前信息系统建设中安全工程现状的分析, 结出信息系统存在的几大安全问 题, 从而有针对性地引入SSE-C 模型, 通过对模型的介绍阐述了如何在模型指导下进行信 息系统安全工程管理.最后给出在模型的基础上制定安全基线的方法.实践证明采用这种过程 控制的方法来指导信息系统安全工作, 有针对性地解决了信息系统安全的动态性和广泛性. :信息系统;SSE-C 模型;安全工程管理 :TP309　　:A　　:1001-0505(2002)01-0032-05 Management of info-security engineering based on SSE-CMM model Qian Gang　　DaQingli (College of Economicand anagement, Southeast University, Nanjing 210096, China) Abstract:　By analyzing the current situation of security engineering in present information system con- struction, this paper sums up several main security problems of the information system and introducesthe SSE-C model aiming at these problems.It also makes an exposition of how the information system se- curity engineering management works by introducing the SSE-C model and presents amethod of mak- ing security base line on the base of the model.Actual situation shows that the application of this pro- ceeding control method guides the information system security and solvestheinformation system securitys dynamic extensive character. Key words:　information system;SSE-C model;security engineering management 2) 1　 , . , . , 3) , 50 、 . , 、 , , . , , , 1) , . .