Design And Development Of The Visualization Platform For The Education Information Resources Security Risk Assessment

With the popularity of the Internet, the development of computer technology, information technology has been deeply integrated into the work of teaching and learning. The school's official website provides a window of a comprehensive understanding of the status of the University for the outside world; The Web site provides a platform for education and teaching management to improve the education and teaching management method; Ppt courseware has become almost essential for the classroom teaching elements, provides visualization of knowledge and information for the student. These educational resources bear the important services such as scientific research and education management. Therefore, the security and stability of educational resources are very important. This article is for the purpose of assessing the risk of educational resources, in order to forecast security incidents brought to the educational resources and help to better understand the risks and grasp the risks. And I use quantitative methods to master events occurred in the general rules. And provide a reference for subsequent formation of coping optimal measures to the risk and ultimately reduce or eliminate the risk.According to the particularity of education resources security demand,I developed classification evaluation method to adapt to the educational resources combined with information security risk assessment of the relevant national standards.1. Asset identification and assets assignment of confidentiality, availability and integrity.2.To identify the threat and the assets assignment of threat frequency.3.Vulnerability identification and the assignment of severity of the vulnerabilit;4. To identify the existing security measures.5. A matrix method to estimate the value at risk.I put the above assessment methods as guidelines, design education resource risk visualization system combined with information security risk visualization technology,A total of 8 modules of this system using PHP, mysql, HTML as the main programming language and CSS as a secondary development, including: the login module, module project, asset identification module, the threat identification module, fragile recognition module, the existing security measures recognition module, value at risk calculation module and visualization module.The test of the system evaluate four types of samples of educational resources on windows7 platform.1. A university query the data through the educational administration system;2. The University's official website.3.PPT courseware data; 4. A University of electronic whiteboard, eventually display the value at risk and risk level with tables and graphs visualization, in order to help staff understanding the possibility of security incidents and influence of education resources in a qualitative way. and to demonstrate the effectiveness of the system.