Research On Evaluation Criteria Of Information System Security Based On XML

Information resources have been becoming the most important strategic resource of country's economic construction and social development. Information resource management is an important means and carrier of the information system. The problem of information system security has become the hot issues of the organizations and scholars concerned. Testing and evaluation work for classified protection of information system security has become the important issues. In this dissertation, xml is applied to evaluation criteria knowledge representation, extablished the xml schema of testing and evaluation criteria.The dissertation first analyses the present status and existing problems with regard to information system security testing and evaluation criteria. It also summarizes the theory underpinning xml schema and oracle xml db storage strategy. Secondly, the dissertation established 18 Class in the layer of technology, which according to the knowledge representation of Object Oriented and production rule based on the character of testing and evaluation criteria. Finally, This dissertation in view of the characteristics of the evaluation criteria of Information System, the use of XML to describe the testing and criteria of information System, the establishment of a XML Schema model and take advantage of Oracle XML DB repository storage testing and evaulation criteria data.Using Oracle full-text retrevial and xml transform technique to manage evaluation system, generate evaluation report.