Design And Implementation Of Level Protection Assessment Information Management System

Shanghai Testing Center is one of the earliest domestic institutions for information security evaluation and mainly carries out more than twenty deduction tasks including the national information security product certification testing,security evaluation for public system, grade protection evaluation information system,risk assessment services. With the popularity of informatization in all walks of life and business volume increasing of the center year by year, the evaluation work became very heavy. This paper aims to develop a software tool for evaluation to make the evaluation staff generate the final evaluation report fast, reduce the workload of reporting and improve work efficiency.Level protection assessment information management system are overall divided into two parts which are server and client. The server was developed based on the framework of company parts library. And the server's code structure follows development specifications of company parts library. "Winform" client architecture was developed directly based on "Microsoft. Net Frame Work", whose code was overall divided into three layers structure. Main business layer "ShtecEvalTool" contains the application directory and the core code directory of "WebReferences" and "Webservice", which contains all the underlying code as well as the control code of public user; the database manipulation layer "ShtecDB" is the database access layer of the whole system; business control layer "ShtecBO" can provide the method for the datasheet processing of the most database. According to the requirements of the overall design, the server of level protection assessment information management system achieved the functional module such as the electronic bulletin management, license management, basic module management, attachment vulnerability database management, report template management, key certificate management.This paper ultimately performed the testing for the product description and quality of the software through testing of functionality, reliability, ease-to-use, maintainability, portability and performance and got the conclusion that the functionality of the software met the functional requirements; interoperability of the software and the external equipment was normal; the software ran stably during the testing; abnormal exit and data loss caused by software failures didn't happen.