信息安全研究 ›› 2018, Vol. 4 ›› Issue (9): 825-835.

• 技术应用 • 上一篇    下一篇

面向企业信息化规划的安全架构开发模型设计

丁禹哲1,敬铅2,孙伟3   

  1. 1. 中山大学数据科学与计算机学院
    2. 中山大学电子与信息工程学院
    3. 中山大学信息科学技术学院
  • 收稿日期:2018-09-17 出版日期:2018-09-15 发布日期:2018-09-17
  • 通讯作者: 丁禹哲
  • 作者简介:丁禹哲 中山大学本科生,软件工程专业. 敬铅 1980年,硕士,高级工程师,主要研究方向为信息化规划、数据治理与安全等. 孙伟 1974年,博士,教授,博士生导师,主要研究方向为网络安全和多媒体通信技术.

Design of security architecture development model for enterprise information planning

  1. 1.
    2. School of Information Science and Technology, Sun Yatsen University
  • Received:2018-09-17 Online:2018-09-15 Published:2018-09-17

摘要: 随着数据时代的到来,信息系统面临的安全攻击越来越多,损失也越来越大,信息安全问题伴随信息孤岛、数据共享等问题治理的开展也越来越突出。对于信息安全保护也就变的愈加困难,走传统“脚痛医脚、头痛医头”的方式很难系统性解决现存的安全问题。因此,必须从信息化规划和整体架构设计就开始分析和设计安全防范体系,真正实现“自顶而下”的企业信息化安全架构规划和设计,以指导信息化建设的信息安全工作。本文以现有主流企业信息化规划方法为基础,结合信息化规划中有关安全架构的模型、方法或框架,提出基于EISA和TOGAF ADM框架的SADM安全架构开发模型,以为开展企业信息化规划和架构设计提供参考,进而为后续建立安全架构开发方法体系开展前期探索。

关键词: 企业架构, 企业信息安全架构, 信息化规划, 架构开发方法, 安全架构开发模型

Abstract: With the advent of the information age, information systems are facing more and more security attacks, and the loss is also increasing, the information security issues accompanied with information island, data sharing and other issues of governance are becoming increasingly prominent. Information security protection has become increasingly difficult,and it is more difficult to solve the above problems systematically with taking stop-gap measures as before.Therefore, it is necessary to analyze and design the security system accompanied with the information planning and the framework design, so as to truly realize the "top-down" enterprise information security architecture planning and design,and guide the information security work. Based on the existing mainstream enterprise informationization planning methods and the related security architecture models, methods or frameworks in informationization planning, this paper proposes a SADM security architecture development model based on EISA and TOGAF ADM frameworks, which provides a reference for enterprise informationization planning and architecture design, and gives an early exploration for the follow-up establishment of the security architecture development method system.

Key words: EA, EISA, Informatization Planning, TOGAF ADM, SADM