CAJ | 학술논문

根据信息安全等级保护工作实际需求，依据等级保护相关标准，文章研究实现了一种基于主机的等保现场测评工具。该工具可用于公安网安部门、等保测评机构及信息系统运营和使用单位对主机安全进行自动化快速测评，并输出详实的检测报告，极大提高了工作效率，保障了测评质量，降低了一线检测人员的工作强度和技术难度，在实际应用中取得了良好效果。
근거신식안전등급보호공작실제수구，의거등급보호상관표준，문장연구실현료일충기우주궤적등보현장측평공구。해공구가용우공안망안부문、등보측평궤구급신식계통운영화사용단위대주궤안전진행자동화쾌속측평，병수출상실적검측보고，겁대제고료공작효솔，보장료측평질량，강저료일선검측인원적공작강도화기술난도，재실제응용중취득료량호효과。
According to the practical demands of information classified security protection(ICSP),the paper provides a kind of host-based ICSP on-site evaluation tool which was developed in accordance with the relevant standards of ICSP . This tool can be applied to the department of network security, ICSP evaluation organization,network and information system operation and use units,evaluates the host security in a rapid and automatic manner, and exports detailed detection report. The tool can improve work efficiency greatly, guarantee evaluation quality, and reduce work intensity and technical dififculty of the on-site inspectors, which has a lot of positive effects on practical evaluation work.