Analysis And Research Of Enterprise Information Assets Security Risk

With the development of cloud computing and mobile Internet, security risk management of enterprise IP asset becomes increasingly important. With the speedup of informationization process in China, government departments increasingly depend on variety information systems. The spreading of Trojan horse and worm virus leads to data loss, confidential information leakage and server paralysis increasingly frequent,meanwhile, security holes by administrator improper configuration become more frequent. All these things have been serious threats to network security.As the source of various types of malicious attacks and data theft,the computer system’s controllabilityis getting lower and lower as lack of a unified security policy and security measures. We aim at design and implementation of IP asset discovery and security risk management system in this paper according to policy of Internet in our country.Based on the existing information security risk analysis model, this study is designed to meet the Federal DesktopCore Configuration(FDCC) and other security configuration standards.According to the classified protection of the system of requirements and actual needs, the study develops a security configuration baseline, in order to strengthen mainstream operating systems and application software security management. On the basis of casestudy, the papercarries out IP propertysecurity design and development tools, which will have the ability of security configuration and baseline assessment by way of remote or local systems, withthe scope of examination of major operating systems, database, network equipment, etc.We design and implement the system based on an open source software to realizeIP propertyexamination, property management, risk scanning, risk assessment and post verification. We also have a friendly interface and rich reporting system,reaching an intellectualized and automatedsecurity configuration baseline assessment.A unified, standardized, automated security configuration baseline management is achieved in the study.