Risk Evaluation Process Model of Information Security

摘要：

The risk assessment applied in Information technology is the information security risk evaluation. A modeling method of security system that is suitable to description results and restriction of information and to modeling form and control of distributed system is put forward based on the analysis of the concept of security system risk evaluation in the field of information security. A model of information security evaluation process has been built based on Petri net. The process is divided into several objects, such as assets identification, threats identification, vulnerability identification and existing security control measures identification etc. and make a detailed description to each object on Petri net theory.

关键词： Risk evaluation rocess model information security petri net

作者: LIU Jing

作者单位: Fire Command Department The Chinese Peoples Armed Police Force Academy Langfang,China

会议类型: 国际会议

会议名称: 2009 International Conference on Measuring Technology and Mechatronics Automation(ICMTMA 2009)(2009年检测技术与机械自动化国际会议)

会议地点: 长沙

会议语种:英文

页码: 1265-1268

在线出版日期: 2009-04-11（万方平台首次上网日期，不代表论文的发表时间）