Research On Security Baseline Risk Assessment Technology

Baseline assessment is a typical method that used in information security risk assessment. Security baseline inspection often include a large number of manual inspection items, Therefore, if the work executed by hand, it is inefficiency and inevitable to make wrong result, even will change configuration on target systems because of wrong operation on them.This paper aims to design a security baseline model based on business system, and achieve an automated security baseline risk assessment system, which can do security configuration check on popular operation systems, databases, applications, routers, firewalls and switches automatically, instead of manual work, and improve the efficiency of security assessment, will be very useful for information security risk assessment.In this paper, domestic and international development and existing problems about information security risk assessment is analyzed. Also this paper proposes and implements a security baseline risk assessment system based on business, and gives an assessment of ideas, design framework, overall operating process, core functional module design; In the following chapter it demonstrate system functions by an example.