An Risk-Analysis-Centric Model of Information System Security Engineering
Yijun Li · Yunchou yu guanli · 2004
At first, this paper analyzes the problems for current information system security strategy. Then, after SSE-CMM is explained, a risk-analysis-centric model of information system security engineering is established using system engineering theory. Moreover, an risk analysis method based on global risk information deposit (GRID) is proposed. Meanwhile, the relations of GRID components are explained. At last, the conclusion and further research are given.