论文部分内容阅读
建立安全体系结构主要是根据所需要保护的系统资源,对资源攻击者的假设及其攻击的目的、技术手段以及造成的后果来分析该系统所受已知的、可能的和该系统有关的威胁,并且考虑到构成系统各个部件的缺陷和隐患共同形成的风险,然后建立起系统的安全需求。建立安全体系结构的目的,是从管理和技术上保证安全策略得以完整准确地实现,安全需求全面准确地得以满足,包括确定必需的安全服务、安全机制和技术管理,以及它们在系统上的合理部署和关系配置。
The establishment of a security architecture is based on the system resources to be protected, the attacker’s assumptions and the purpose of attack, technical means and the consequences to analyze the system known and possible threats related to the system , And taking into account the risk of the defects and hidden dangers that make up each component of the system, and then establishing the security requirements of the system. The purpose of establishing a security architecture is to achieve a complete and accurate management and technical assurance of a security strategy that is fully and accurately met, including the identification of required security services, security mechanisms and technology management, and their reasonableness in the system Deployment and relationship configuration.