民族证券SYJ营业部网络信息安全风险评估

发布时间：2018-01-18 09:22

本文关键词：民族证券SYJ营业部网络信息安全风险评估　出处：《河北科技大学》2017年硕士论文　论文类型：学位论文

【摘要】：我国的证券市场的稳定性,整个国家的经济发展有着至关重要的作用。参与证券市场的人员分布在各行各业,证券行业的信息安全事故会波及到很多行业,甚至会使很多的平民百姓的生活受到影响,使国民经济及社会秩序遭受损失,引起社会动荡。正是因为信息安全在证券市场的重要性,研究如何做好证券市场的信息安全管理,是一个很现实和很重要的课题。证券公司的信息安全风险管理的基础和前提是风险评估,即必须对网络上的系统进行安全评估。尽管人们对信息安全风险评估的研究有了一定的基础,但是对其中的理论方法需要进一步完善,尤其在证券市场的信息安全风险评估方面缺乏针对性,需要进一步的研究和探讨。本文首先分析了信息安全风险评估的发展现状,然后对风险评估方法进行了详细的分析和探讨,指出目前我国证券市场中主要的信息安全问题。最后从资产识别、威胁识别、脆弱性识别三个方面,综合对民族证券公司SYJ营业部的系统进行风险分析,评定风险等级,并提出安全建议进行风险管理。
[Abstract]:The stability of the securities market in our country and the economic development of the whole country play a vital role. The personnel involved in the securities market are distributed in various industries, and the information security accidents in the securities industry will spread to many industries. It will even affect the lives of many ordinary people, make the national economy and social order suffer losses, cause social unrest, precisely because of the importance of information security in the securities market. It is a very realistic and important topic to study how to manage the information security of securities market. The foundation and premise of information security risk management of securities companies is risk assessment. In other words, it is necessary to evaluate the security of the system on the network. Although people have a certain basis for the risk assessment of information security, but the theory and methods of which need to be further improved. Especially in the securities market information security risk assessment lack of pertinence, need further research and discussion. Firstly, this paper analyzes the current situation of information security risk assessment. Then the risk assessment methods are analyzed and discussed in detail, pointing out the main information security problems in the current securities market in China. Finally, from the asset identification, threat identification, vulnerability identification three aspects. This paper synthetically analyzes the risk of the business department of SYJ, evaluates the risk grade, and puts forward some safety suggestions for risk management.
【学位授予单位】：河北科技大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;F832.39

【参考文献】