摘要
网络安全等级保护工作已开展多年,在整个工作环节中,仅等级保护测评有量化评价。因此,大家往往把个别信息系统的等级保护测评得分与网络运营者等级保护工作整体落实情况画等号,给主管部门整体评价网络运营者等级保护落实情况带来困难。文章根据多年来等级保护测评经验,对整个等级保护流程进行梳理,建立等级保护各环节评价指标。采用层次分析法对指标进行赋权,进而采用模糊综合评价法完成对网络运营者等级保护工作情况进行综合量化评价,突出网络安全等级保护工作周期各环节的重要性和薄弱点,为网络运营者提升等级保护工作效率带来一定的指导意义。
Network security classified protection work has been carried out for many years,Throughout the work process,,only the classified protection evaluation link has a quantitative evaluation.Therefore,people often equate the classified protection evaluation score of an information system with the overall implementation of the network operator's classified protection.This situation caused difficulties for the competent authorities to comprehensively evaluate the implementation of the network operator's classified protection work.This article is based on years of experience in classified protection evaluation.Based on years of experience in protection evaluation,the article sorts out the entire classified protection process and establishes evaluation indicators for each link of classified protection.The article adopts the analytic hierarchy process to weight the indicators,and then uses the fuzzy comprehensive evaluation method to comprehensively quantify the network operator's classified protection work,highlighting the importance and weakness of each link in the network security classified protection work cycle,it has guiding significance in improving the efficiency of network operators'classified protection.
作者
徐鑫
XU Xin(Shanghai Information Security Testing Evaluation and Certification Center,Shanghai 200011,China)
出处
《电脑知识与技术》
2020年第32期14-17,共4页
Computer Knowledge and Technology
关键词
等级保护
信息安全测评
网络安全
层次分析法、模糊综合评价
classified protection
information security evaluation
internet security
analytic hierarchy process(AHP)
fuzzy comprehensive evaluation
