在研究信息系统安全性保障的基础上,深入研究了信息系统的安全性评估。阐述了信息系统安全性评估的重要性和国内外发展现状,描述了信息系统安全性评估技术。为实现针对信息系统安全性的自动评估,设计了信息系统安全性评估系统。

On the basis of information assurance, we study the security assessment technology of IT system, describe the importance of the security assessment of IT system, expatiate the security assessment technology, and design the assess system which accomplishes assessment of the security of the IT system.