【正文】 1． 3． 3 信息平臺(tái) ...........................................................................................................................91． 3． 4 應(yīng)用平臺(tái) .........................................................................................................................101． 3． 5 用戶桌面平臺(tái) .................................................................................................................101． 3． 6 安全平臺(tái) .........................................................................................................................10第二章 信息系統(tǒng)安全概述 ...................................................................................................................112．1 安全性概念 ................................................................................................................................112．2 安全等級(jí)標(biāo)準(zhǔn)介紹 ....................................................................................................................122．3 國際常用的安全機(jī)制介紹 ........................................................................................................142． 3． 1 專用安全機(jī)制 .................................................................................................................152． 3． 2 擴(kuò)展型安全機(jī)制 .............................................................................................................16第三章 設(shè)計(jì)目標(biāo)及原則 .......................................................................................................................173．1 安全體系的設(shè)計(jì)目標(biāo) ................................................................................................................173．2 安全體系的設(shè)計(jì)原則 ................................................................................................................183．3 安全體系應(yīng)具備的功能 ............................................................................................................183．4 安全體系設(shè)計(jì)的范疇 ................................................................................................................20第四章 安全風(fēng)險(xiǎn)概述 ...........................................................................................................................214．1 安全風(fēng)險(xiǎn)的來源 ........................................................................................................................214．2 安全風(fēng)險(xiǎn)分析與評估 ................................................................................................................214．3 信息系統(tǒng)安全的脆弱性 ............................................................................................................224． 3． 1 物理安全危機(jī) .................................................................................................................224． 3． 2 邏輯安全危機(jī) .................................................................................................................234． 3． 3 網(wǎng)絡(luò)安全威脅 .................................................................................................................234． 3． 4 信息系統(tǒng)的安全漏洞 .....................................................................................................244． 3． 5 操作系統(tǒng)的脆弱性 .........................................................................................................244． 3． 6 數(shù)據(jù)庫管理系統(tǒng)安全的脆弱性 .....................................................................................254． 3． 7 缺少安全管理 .................................................................................................................264．4 信息系統(tǒng)安全損失統(tǒng)計(jì) ............................................................................................................261 / 414． 4． 1 因系統(tǒng)停機(jī)帶來的損失統(tǒng)計(jì) .........................................................................................264． 4． 2 因數(shù)據(jù)丟失而帶來的損失統(tǒng)計(jì) .....................................................................................264． 4． 3 因惡意攻擊造成的損失 .................................................................................................274． 4． 4 因計(jì)算機(jī)病毒造成的損失 .............................................................................................274．5 信息系統(tǒng)中各級(jí)網(wǎng)絡(luò)的安全風(fēng)險(xiǎn)與對策 ................................................................................274． 5． 1 基層網(wǎng)絡(luò)或終端 .............................................................................................................274． 5． 2 基層公司信息系統(tǒng) .........................................................................................................284． 5． 3 分中心信息系統(tǒng) .............................................................................................................294． 5． 4 總中心信息系統(tǒng) .............................................................................................................30第五章 安全體系規(guī)劃及技術(shù) ...............................................................................................................325．1 安全體系的總體框架 ................................................................................................................325． 1． 1 系統(tǒng)安全 .........................................................................................................................325． 1． 2 數(shù)據(jù)安全 .........................................................................................................................335． 1． 3 網(wǎng)絡(luò)安全 .........................................................................................................................345． 1． 4 安全管理 .........................................................................................................................365．2 部分產(chǎn)品及技術(shù)手段介紹 ........................................................................................................375． 2． 1 數(shù)據(jù)存儲(chǔ)管理 .................................................................................................................375． 2． 2 雙機(jī)熱備份和集群系統(tǒng) .................................................................................................385． 2． 3 網(wǎng)絡(luò)主干的冗余 .............................................................................................................395． 2． 4 數(shù)據(jù)訪問控制 ...................................