Design And Implementation Of Online Model Evaluation Platform For Information Security Level Protection

The concept of information security has experienced a long development period in the middle of the twentieth Century, until 1990 before to deepen. In twenty-first Century, with the continuous development of information technology, information security issues is growing increasingly prominent. Information security evaluation standards in foreign countries is increasingly perfect, such as the trusted computer system evaluation criteria USA (TCSEC), the European information technology security evaluation criteria (ITSEC). In this environment, China also conform to the trend of the proposed information security level protection evaluation criteria. The purpose is to ensure the security of our country governments and the enterprises information. For the convenience of the government, enterprise information security situation, at the same time, in the context of large data collected from all walks to implement the information security, the purpose of this study is through the user’s online Q & A, and then construct the model on five grade level standards for the protection of information security, reflect the current status of information security of users, therefore this platform is more advantageous to the government and enterprises to implement the national information security level requirements.This platform is over the online assessment platform of traditional design, the results show the gap of the performance more specific, more intuitive, and all walks in information security information is collected for summary and analysis. This paper is based on B/S structure and MVC model, and every user’s business will be instantiated. At the same time, the object oriented design idea is used to realize the high cohesion and low coupling characteristics, which makes the platform more robust and scalable.First of all, this paper analyzes the background of information security and the constantly changing network environment, the importance of information security, and best practice at home and abroad in the field of information security, expounds the importance of information security level protection.In the demand analysis part, discusses the background of the development of the information security level protection model evaluation platform, the platform of simple exposition, illustrates the business logic and significance of the platform, and elaborate on the platform of functional requirements analysis and non functional needs analysis, the demand analysis mainly carries on the elaboration from user behavior and administrator needs.Further this paper introduces the outline design and detailed design of the platform. The network architecture design, architecture design and functional architecture design were introduced in the outline design. Network architecture design based on B/S model as the main platform, the data transfers from the client to the server, and then from the server to the client, this procession is described; the platform architecture design combined with the business process, through the MVC three layer model and database persistence layer, the stratification of the platform is described; platform architecture chart are showed in the functional architecture design, and the relationship between the specific functions and each function module is introduced in this paper. In the detail design part, this paper introduces the platform’s application of each function. MemCache, Redis, Sphinx technology in the platform is introduced.In the implementation and testing of the platform, this paper provides general introduction of the platform, through the addition of platform’s front and back pictures, the difficulties of the platform is described, including the technology of caching. The platform in the case of high concurrency can still keep smooth operation, and for the functional testing of the platform is described in detail.Finally, this paper briefly introduces the application of information security level protection model evaluation platform, and points out the shortcomings of the platform, and puts forward suggestions for further improvement and upgrading.To sum up, based on the analysis of the national information security level of demand and the need of the local governments and enterprises, this paper designs and implements the information security level protection model evaluation platform.