Introduction to Information Security Engineering

Author: Shen Changxiang
Publisher:
Publish Date: 2003-07-01
Features: Information Security Engineering is a control tool that emphasizes the systematic nature of information security. Treating and addressing information security issues from the perspective and methods of systems engineering has been a focal point of intense interest in the field of information security in recent times. From the height of information security engineering, comprehensively constructing and standardizing China's information security not only holds significant theoretical importance but will also greatly safeguard the security of national information resources. This book introduces and analyzes information security engineering methods, divided into 10 chapters. Chapter 1 introduces the basic concepts of information security assurance and the development of information security engineering methods. Chapters 2–4 explain the systems engineering process and Information System Security Engineering (ISSE). Chapters 5–7 analyze the SSE-CMM methodology, including the SSE-CMM architecture, as well as the domain and capability dimensions of SSE-CMM. Chapter 8 analyzes the completeness of SSE-CMM. The theme of Chapter 9 is the relationship between information security engineering and China's Computer Information System Security Classification Protection. Chapter 10 discusses the information security engineering method within the context of ISO/IEC 15443, "IT Security Assurance Framework." This book can serve as a teaching text for postgraduate students majoring in information security and for professional training in information security technology. It is also suitable for reading by information security technicians, managers, and researchers.