Abstract: This paper proposes a framework for information system security test. It covers many aspect of information system security test, includes test policy, basic theory, test method and test engineering. This framework contributes a lot for building a standard and conforms information system security test. The innovation points of the paper proposes four methods to analysis information system security from test view and two ways for security test.

Key words: security test, system test, test framework, information system security

摘要： 提出一种信息系统安全测试的框架，包括信息系统安全测试的策略、基础理论、方法和工程等，为建立一个标准的、一致性的信息系统安全测试对比基准提供了基础。给出4种信息系统安全测试分析方法和2种测试方式。

关键词: 安全测试, 系统测试, 测试框架, 信息系统安全

CLC Number: 

• TP391