计算机测量与控制
計算機測量與控製
계산궤측량여공제
COMPUTER MEASUREMENT & CONTROL
2010年
2期
414-416
,共3页
E-P2DR3模型%信息熵%报告模块%风险评估%银行
E-P2DR3模型%信息熵%報告模塊%風險評估%銀行
E-P2DR3모형%신식적%보고모괴%풍험평고%은행
E-P2DR3 model%information entropy%reporting module%risk assessment%bank
为了提高银行信息系统的安全性,防止产生严重的经济损失,提出了E-P2DR3安全模型;P2DR2模型是一个最常用的安全模型,该模型把体系结构划分为策略、防护、检测、响应、恢复五个部分;首先在该模型的基础上增加了报告模块,使系统管理员更加方便和有效地管理信息系统;其次引入基于信息熵的风险评估来对其进行改造,根据风险评估的结果来制定更加完善的安全策略,从而更好维护信息系统的安全;最后得到E-P2DR3安全模型,并利用该模型提出了银行信息安全体系的建设方案.
為瞭提高銀行信息繫統的安全性,防止產生嚴重的經濟損失,提齣瞭E-P2DR3安全模型;P2DR2模型是一箇最常用的安全模型,該模型把體繫結構劃分為策略、防護、檢測、響應、恢複五箇部分;首先在該模型的基礎上增加瞭報告模塊,使繫統管理員更加方便和有效地管理信息繫統;其次引入基于信息熵的風險評估來對其進行改造,根據風險評估的結果來製定更加完善的安全策略,從而更好維護信息繫統的安全;最後得到E-P2DR3安全模型,併利用該模型提齣瞭銀行信息安全體繫的建設方案.
위료제고은행신식계통적안전성,방지산생엄중적경제손실,제출료E-P2DR3안전모형;P2DR2모형시일개최상용적안전모형,해모형파체계결구화분위책략、방호、검측、향응、회복오개부분;수선재해모형적기출상증가료보고모괴,사계통관리원경가방편화유효지관리신식계통;기차인입기우신식적적풍험평고래대기진행개조,근거풍험평고적결과래제정경가완선적안전책략,종이경호유호신식계통적안전;최후득도E-P2DR3안전모형,병이용해모형제출료은행신식안전체계적건설방안.
In order to improve the security of bank information systems and prevent serious economic loss,the E-P2DR3 security model is put forward.The P2DR2 model,as the most commonly used security model,has compartmentalized its structure as policy,protection,de-tection,response and restoration.Firstly,with the purpose of helping system administrators to manage information systems more convenient and efficient.it has added the reporting module based on the P2DR2 model.Secondly,the risk assessment based on the information entropy is presented,then it has made the more comprehensive security strategy in accordance with the results of risk assessment.At last,it has ac-quired the E-P2DR3 security model and put forward the constructing scheme of the bank information security system.