The Research Of The ASP Service Mode Enhancing Information Security

ASP(Application Servicethe Provider)- Apply service promoter,point to provide a calculator application the business enterprise of the service exclusively,its setting up, contracting for from a facilities(such as data center) of centralized management can be obtained by several customers to use with management through the application for packing.The information Security makes the information avoid a series threat,guaranteeing the continuous of business,reducing the loss of business with maximum limit,obtaining the repay of investment and business with maximum limit,what to involve is a confidentiality,integrity and usability.Namely:confidentiality-The customer which only is authorized can visit a related information;integrity-The accuracy and the integrity of information;usability-Time of needing,the information is available.The information security which comes from British standard association(the Institute of the British Standards,BSI) manages standard ISO27001,getting a lot of approbations of nations,is international have a representative up of the management system of the information security standard.This text puts forward an ASP service the concept of the system first,passing analysis ASP service the mode turn into and make use of a mechanism to analytical its merit and shortcoming,providing the company's business enterprise reputation degree this minority to the service,putting forward a guarantee data the improvement method of the safety;Thus derivation information the concept of the safety,pass an analytical international last information the present condition of development present condition and our country the information safe management of the safety,then discover among them of problem;Pass a counterplan that investigate research's correspond,thus the derivation is up international to have the management system standard ISO27001 of the representative's information safety;Taking actual case as a basis also,elaborating in detail is alsoa ASP service to provide a company how to build up a set of system with safe ISO27001 and builds up an ASP service system mode which pays attention to an information safety according to this system,and display the result of implement.