文档编号:中国农业银行计算机安全体系解决方案Ver1.0.0.0目录1项目的目的和意义................................................................................................61.1项目的必要性及意义....................................................................................61.2国内外的现状及趋势....................................................................................71.2.1安全管理类............................................................................................81.2.2安全模型类............................................................................................91.2.3项目成果的应用前景..........................................................................112项目目标..............................................................................................................122.1目标..............................................................................................................122.1.1项目总体目标......................................................................................122.1.2项目的步骤和阶段目标......................................................................142.1.2.1农行计算机安全体系的准备..........................................................152.1.2.2农行计算机安全现状调查和风险评估..........................................162.1.2.3农行计算机安全体系策略文件的编写..........................................172.1.2.4农行计算机安全体系实施方案的设计..........................................182.2主要指标......................................................................................................203设计思路与技术路线..........................................................................................213.1设计思路......................................................................................................213.2技术路线......................................................................................................223.2.1研究设计技术路线的选定..................................................................223.2.2研究设计技术解决方案......................................................................233.2.3解决关键技术的途径..........................................................................233.2.3.1保护对象框架的建立......................................................................243.2.3.2安全控制的选择和设计..................................................................243.3工程化..........................................................................................................244项目内容..............................................................................................................254.1总则..............................................................................................................254.1.1总体理念..............................................................................................254.1.1.1安全体系..........................................................................................254.1.1.2安全框架模型..................................................................................264.1.1.3保护对象框架..................................................................................304.1.1.4安全等级指标体系..........................................................................354.1.2项目总体流程综述..............