摘要： 分析了BS7799的结构特点,进而研究了当前主要的风险评估方法,旨在探讨一套能够对BS7799标准进行改进、定性和定量相结合的风险评估方法,以克服单一评估方法的不足。在具体设计风险评估方法时,采取故障树和风险模式影响分析相结合的方式对BS7799进行了实施与应用。并将该方法在实际的风险评估工具的设计中进行实现,收到了较好的效果,从而验证了方法的科学性和可行性。
关键词:
风险评估,
BS7799,
风险分析方法
Abstract: This paper analyses the structure characteristics of BS7799 and main methods for risk assessment currently,which aiming to explore an improving,combining associative observation with quantity risk assessment method to conquer the disadvantage of single risk assessment method.As designs a risk assessment method,the paper adopts method combining with fault tree analysis and risk model contribution analysis to put into effect and applies BS7799.The method is realized in the practical design of risk assessment tool,which gains good effectiveness and proves its scientific and feasibility.
中图分类号:
聂晓伟,张玉清,杨鼎才,韩权印. 基于BS7799标准风险评估方法的设计与应用[J]. , 2005, 31(19): 80-82.
NIE Xiaowei1,2,ZHANG Yuqing2,YANG Dingcai1,HAN Quanyin2,3. Design and Application of Risk Assessment Method Based on BS7799 Standard[J]. , 2005, 31(19): 80-82.