文献类型：期刊文献

英文题名：Compliance determination based CME information system security risk assessment model

作者：Zhang, Xueqin[1]; Jiang, Changqin[2]; Xu, Cuihua[1]; Lin, Jiajun[1]

机构：[1] East China University of Science and Technology, Shanghai 200237, China; [2] China Information Technology Security Evaluation Center, Beijing 100089, China

年份：2010

卷号：50

期号：SUPPL. 1

起止页码：1560

外文期刊名：Qinghua Daxue Xuebao/Journal of Tsinghua University

收录：EI(收录号：20104813430871)

语种：英文

外文关键词：Information use - Information systems - Cryptography

摘要：A conformity determination based CME information system security risk assessment model was developed to quantitatively analyze information system security risk ranks. Quantitative methods are given to evaluate the information system security status, security requirements, and security risks. The information system security assurance ability and the security requirements are evaluated to judge the degree of consistency between the security requirements and security status to reduce the information system security risk. This model provides a structured, quantifiable method for ranking information system security for quantitative assessments of information system security risks.