CAJ | 학술논문

随着国家信息化建设的飞速发展，信息系统得到广泛应用，而针对信息系统的攻击也越来越普遍，安全事件时有发生，如何确保信息系统得到足够安全保障，系统符合上线运行条件，将成为一项重要课题。本文提出一套在信息系统上线前开展安全评测的方案，内容包括四个方面：代码安全审计、安全漏洞扫描、安全配置核查和渗透性测试，并给出判别信息系统上线安全标准。此方案能有效的检测出信息系统各层面隐藏的安全漏洞，并可以根据安全标准得出是否符合上线运行的结论，有力的保障信息系统上线运行安全。
수착국가신식화건설적비속발전，신식계통득도엄범응용，이침대신식계통적공격야월래월보편，안전사건시유발생，여하학보신식계통득도족구안전보장，계통부합상선운행조건，장성위일항중요과제。본문제출일투재신식계통상선전개전안전평측적방안，내용포괄사개방면：대마안전심계、안전루동소묘、안전배치핵사화삼투성측시，병급출판별신식계통상선안전표준。차방안능유효적검측출신식계통각층면은장적안전루동，병가이근거안전표준득출시부부합상선운행적결론，유력적보장신식계통상선운행안전。
With the rapid development of the national information construction,information systems are used widely,and attack on information systems is becoming more and more popular,security incidents have occurred from time to time,how to ensure that information systems have enough security.The system meets the on-line operating conditions,will become an important topic.In this paper,a set of before the on-line information system carry out the safety evaluation of the program,including four aspects:code security audit,security vulnerability scanning,security conifguration veriifcation and permeability test,and gives the discriminant information system on-line safety standards.This scheme can effectively detect the hidden information at all levels of the system of security vulnerabilities,and according to the safety standards,can come to the conclusion that whether accords with on-line running,and can ensure the safety of the information system on-line operation strongly.