摘要： 信息系统安全性往往取决于结构中最薄弱环节,而这样的安全瓶颈又往往是动态变化的。针对这样一个基本原理,力图建立一个可量化的、对系统处于变化中的安全薄弱环节能快速定位的模型。利用这种模型,可对目标系统提出正确的评价和改进意见,从而能真正提高目标信息系统的安全度。

关键词: 信息系统安全, 安全瓶颈, 安全评估模型

Abstract: Information system security is generally decided by security bottleneck, the weakest part of the structure. However the security bottleneck is dynamic and changing. Based on such a principle, the authors build a quantificational model to rapidly position the security bottleneck. With the model, correct evaluation and improvement will be presented to the information system and the security will be greatly improved.

中图分类号: 

• TP309