提出一个信息技术安全评估模型。通过对安全测试评估的内容和功能的研究分析,给出了安全评估模型和安全评估平台的体系结构,介绍了系统实现情况。本评估模型具有对安全测试和评估过程进行组织、管理和调度等功能,并具有通用性、集成性和结构可配置等特点。
An information security evaluation model is proposed. Based on the analyses of contents and functions of security evolution, the architecture of the security evaluation model and platform is presented, and its implementation is given. The main functions of this model are to organize, manage and control the secuiity test and evaluation. It also has features in generalization, integration and configuration.