中小银行信息系统开发生命周期安全保障框架
중소은행신식계통개발생명주기안전보장광가
SECURITY ASSURANCE FRAMEWORK OF INFORMATION SYSTEM DEVELOPMENT LIFECYCLE FOR SMALL AND MEDIUM-SIZED BANKS
  • 万方数据
    计算机应用与软件 계산궤응용여연건
    COMPUTER APPLICATIONS AND SOFTWARE
    2013年 11期 142-144,152 ,共4页

    陆向阳%蒋树立%孙亮%熊延忠

    륙향양%장수립%손량%웅연충

    SDL%信息系统开发%生命周期%安全保障框架 SDL%信息繫統開髮%生命週期%安全保障框架
    SDL%신식계통개발%생명주기%안전보장광가
    SDL%Information system development%Lifecycle%Security assurance framework
    通过研究微软安全开发生命周期SDL（ Security Development Lifecycle ）和《GB 20274信息系统安全保障评估框架》，结合江南农村商业银行信息系统建设的实践，提出适合国内中小银行信息系统开发的全生命周期安全保障框架。该框架将软件安全保障集成到信息系统开发生命周期的五个阶段中，详细阐述每个阶段要进行的安全控制措施，确保系统开发的安全性和可靠性。
    통과연구미연안전개발생명주기SDL（ Security Development Lifecycle ）화《GB 20274신식계통안전보장평고광가》，결합강남농촌상업은행신식계통건설적실천，제출괄합국내중소은행신식계통개발적전생명주기안전보장광가。해광가장연건안전보장집성도신식계통개발생명주기적오개계단중，상세천술매개계단요진행적안전공제조시，학보계통개발적안전성화가고성。
    In this paper we propose a full-lifecycle security assurance framework of information system development suitable for local small and medium-sized banks through studying the SDL of Microsoft and GB 20274 and combining the information system construction practices at Jiangnan Rural Commercial Bank .The framework integrates the software security protection into five phases of information system lifecycle with detail descriptions of the security control measures for each phase , which ensures the safety and reliability of the system development .
    원문보기 원문다운로드 사이트로이동
저자의 최근 논문