Design And Implementation Of Assessment Systemof Classified Protection In Information Securitybased On B/S Mode

The classified protection of information security is one of the basic national policies in Chinese information security domain,playing an important role in the daily work of information security.In view of the problems in present work of protection evaluation,this thesis intends to apply the methods of mainstream evaluation process and general evaluation in order to design and implement an evaluation system that adapts to the work of classified protection evaluation in China.There are the main efforts of the thesis in following:First,the relevant researches about the evaluation system of classified protection at home and abroad will be analyzed and the advantages and disadvantages in each system will be discovered.According to the designment and implementation of these evaluation systems,the thesis will put forward the new method of evaluation on which the improved traditional method can be transferred into the evaluation system.The ultimate development of automatic evaluation ability of the system can greatly enhance the efficency and manageability.Second,this thesis will employ the common design ideas of software engineering to analyze,design and implement the system that is divided into the functional modules and database parts.Third,the evaluation system of classified protection has these functional modules including user management,database management,automatic evaluation,log audit,etc.And automatic evaluation is the integrated module of the core processes of evaluation that involve the collection of evaluation evidence,the analysis of records,the generation of evaluation records and the production of reports,etc.Fourth,to deal with the difficulties of automatic analysis in the system of classified protection,an innovative idea is proposed that the single analysis method of hybrid model can be used to solve the problems of single analysis.Moreover,the comprehensive analysis method based on the subjective and objective evaluation is also raised to solve the problems of comprehensive analysis.In this thesis,a designment and implementation method of the classified protection of information security is presented,which can provide some reference for the research on thesystem of classified protection evaluation.As a part of information security in China,the evaluation system will be more functional in the near future.