移动通信信息系统安全风险评估研究

为了保障移动通信信息系统的安全,制定有效的、可操作性的、科学的安全风险评估体系是当务之急。通过对国内外移动通信信息系统安全风险评估研究的现状,结合其他行业诸如铁路系统、地理信息系统等的信息安全风险评估的经验,笔者首先从一个移动通信信息安全系统风险评估的基本概念入手,给出了诸如风险、脆弱性、威胁、残余风险等一系列定义,提出了移动通信信息系统安全风险评估工作的模型和方案,以及风险评估工作中应该考虑的要素和工作细节,旨在为风险评估工作提供理论指导,使风险评估的过程和结果更具有逻辑性、系统性和可操作性,从而提高风险评估的质量和效果。实践证明了模型和方案是行之有效的。

Study on Security Risk Evaluation for Information System of Mobile Communication

To safeguard the information system of mobile communication, it is urgent to make effective, maneuverable and scientific security risk evaluation system. The model and project of security risk evaluation of mobile communication is presented to provide the theoretical guide, making the course and result more logical and systematic and improving the quality and effect. Its effectiveness is proved feasible and practical.