S-provincial Telecommunications Internet Security Risk Assessment

With the change of consumer behaviors, China Telecom, the largest fixed-line telecommunication carrier, encounters a very difficult position that has never been foreseen. However, while the income of voice services decreasing hardly, China Telecom still keeps the top 1 ISP in China. The increasing income of Internet services becomes more and more important to China Telecom and its Branch, S Telecom.To give the best support to the services, keeping the Internet infrastructure confidential, integrated and highly available is so important. But in S telecom, a risk-based security management system has not been established. The protecting of the internetnetwork is not effective enough. As a combination of the needs of working and researching, the author takes the risk assessment as the breakthrough point to analyze the risk of the internetwork of S Telecom.In order to reach this goal, the author studied many of the documents related to network security and risk assessment in all kinds of journals, thesises, and books. With the help of the mainstream international standards and guidances, the author set up an assessment plan including an optimized model. With the help of a virtual expert's team, a researching project was carried out.This research is all about the detailed risk assessment of internetwork of S Telecom, including identifying assets, classifying the threats and vulnerabilities. By processing these data in SPSS, the risk degree of the internetwork of S telecom is revealed. Some risk treatments are also suggested.The main method in the researching is risk assessment. Some traditional methods are also involved, including FTA, EGM and brainstorming. So, this thesis is a very good combination of the theory and practice, and can be used in some similar situations in the telecommunication carriers in China.