面向信息安全等级测评的安全配置核查系统-计算机软件与理论专业论文.docxVIP

Security Configuration Verification System for Information Security Classification EvaluationAbstractWith the continuous development of information technology and network technology, the process of informationization in our country is also accelerating, and how to effectively ensure information security has become an important part of information construction in our country. The information classified security protection system has become a basic system of our country. Classification evaluation is an important part of information security classified protection , but during the implementation process of classification evaluation facing a lot of evaluation indexes, traditional way of manual detection task is complex. It’s difficult to guarantee the efficiency and completeness of the results. The existing automated configuration verification tools mostly use the standards and models of risk assessment, can’t be used for classification evaluation, therefore, an automated configuration verification and conformity determination system designed for level protection indexes and oriented to level evaluation is very required to assist the manual work, to improve the completeness and efficiency for the classification evaluation.Based on this requirement, this paper, thoroughly and carefully, summarizes and analyzes the domestic and foreign information security criteria and security baseline model., and then studies and compares the relevant key technologies of the current information security classified evaluation, on the basis of those above and according to the information security classified protection index system, this paper build a set of security baseline knowledge base for classification evaluation. This baseline base covers most of the host operating systems, database systems and the common application platforms; corresponding to each classified protection index, the baseline designs the security configuration of each system; based on the security configuration it als