【摘要】 信息系统风险评估贯穿于整个信息系统的生命周期。信息系统是一系列软件和硬件的组合。该文在分析信息系统逻辑组成的基础上,分析信息系统所面临的威胁以及遭受威胁的主要方式。通过对威胁、漏洞以及攻击结果的相互影响的研究,提出了基于故障模型的信息系统风险评估模型以及在此基础上的风险管理形式化描述。更多还原

【Abstract】 Information system risk assessment runs the whole gamut of the life cycle of information system.An information system is a combination of a series of software and hardware.The article deals with the analyses on the threats with which an information system confronts,and the leading modes by which these threats perform on the basis of the system’s logic composition.The paper also presents a risk assessment and management model based on fault model after analyzing threats,vulnerabilities and attack results of information system.更多还原