Dissertation > Excellent graduate degree dissertation topics show

Protection risk assessment based on the information security level of the main business application

Author: XueYanLong
Tutor: FanJianHua
School: Shaanxi Normal University
Course: Business management
Keywords: Information Security Risk assessment Level of protection Analytic Hierarchy Process
CLC: F49
Type: Master's thesis
Year: 2010
Downloads: 113
Quote: 2
Read: Download Dissertation

Abstract

With the accelerating process of information technology, the growing dependence of China's national economy and social development on the basis of information networks and critical information systems, information security is more and more a high degree of attention from the industry. Information about the level of security protection system to adapt to the needs of the development of information technology in China conducted a major national security work, it is a matter of national security, social stability. Thus, the level of information security protection is the objective needs and the urgent need for information security work. The information, however, the level of security protection system in the country has just started, the lack of a complete and mature operability technology can not meet the needs of different enterprise level of security protection. The paper-based to consider in this regard, based on the main business of the level of protection of information security risk assessment model, the level of protection from the enterprise business, focusing on key enterprise information system security level protection. The main research work and innovations are as follows: 1. Enterprises the main business of enterprise information systems to identify. In any organization, the purpose of information security are used to safeguard the normal operation of the organization's business, so the degree of harm caused by the affected countries, organizations and individuals, according to the organization's business, we set up the organization of the system given the different level of security. In this article, we have established the information security risk assessment model based on the main business, through the organization's main business potential security abstraction mapping into asset security concept of qualitative and quantitative measurements of up to a scientific understanding of the organization's information assets. Thus, when an organization's business changes, the corresponding level of information assets should be adjusted accordingly, and thus reflects the information security management is not a once and for all things, but a dynamic process. 2. During asset identification, asset classification using a new classification method. From the outside in, the organization's assets are divided into three major categories of public information assets, the assets of common carrier and private information and carrier assets, this classification information at different levels of the organization is concerned about the degree of association of the assets of the organization's business security differences such a fact situation. 3. Proposed information system based on the Analytic Hierarchy Process (AHP) grading methods and information assets identification method. Pairwise comparison between the principle of the the strict logical elements of the analytic hierarchy process, scientific grading system. By grading will be able to determine the organizations need to adopt what level of information security measures, the same time, we can use this method to further sort of the assets in the system, to distinguish between the core assets, and thus be able to focus for risk management. Upheld from the core business analysis to the core system to the risk assessment model of core assets, fully embodies the spirit and essence of the level of protection.

Protection risk assessment based on the information security level of the main business application

Abstract

Related Dissertations