Design And Implementation Of Network Security Classified Protection Evaluation Project Management System

With the rapid development and application of information technology,the importance of network facilities and information systems has become more and more prominent.At the same time,attacks,damage,data theft and other acts in cyberspace have also increased,and network security issues have become increasingly prominent.The situation of enterprises facing the threat of network attacks has become increasingly serious,and the importance of hierarchical protection work has become increasingly obvious.With the formal determination of the legal status of the national classified protection system in the Network Security Law,enterprises need to build an integrated network security guarantee system for key information infrastructure,and the classified protection evaluation institution will judge whether it meets the standard.So evaluation institutions play an important role in the level protection industry.Classified protection evaluation project management integrates the entire process of classified protection evaluation into the project management cycle,focusing on how evaluation institutions can effectively manage evaluation projects while ensuring classified protection requirements.According to the analysis of the current research situation at home and abroad,most of the current research on classified protection evaluation system is aimed at automatic generation of evaluation reports and automatic evaluation,and there is less research on the management of classified protection evaluation projects.This thesis analyzes the process of conducting a classified protection evaluation project,and discusses how classified protection evaluation institutions can efficiently meet their business needs under the requirements of the classified protection process,in order to determine the functional requirements of the system.The management of the classified protection evaluation organization for the evaluation work directly affects the efficiency of the evaluation and the quality of the evaluation work.These management work include more detailed management of document and record control,evaluation process supervision,etc.Previously,many evaluation institutions were punished for the quality of evaluation.The network security classified protection evaluation project management system designed and developed in this thesis can be well applied in the evaluation organization,helping the evaluation organization improve the evaluation work management ability and project implementation efficiency.The main work of this thesis is as follows:(1)By studying the current situation of classified protection evaluation project management and analyzing the process requirements and business requirements of classified protection evaluation,clarify the requirements of the classified protection evaluation project management system;(2)According to the requirements of software engineering,design the architecture and functional modules of the classified protection evaluation project management system,complete the development and test of the system,and put it into use;(3)The secure computing environment is an important part of the Classified Protection 2.0 standard.Based on the relevant security functions and requirements proposed by security control points in a secure computing environment,design and implement automated evaluation scripts to help evaluators obtain evaluation results effectively and quickly,and improve the efficiency of operating system and database level evaluation and security reinforcement.The system adopts MVC architecture,uses Java language for development,My SQL database for data storage,and uses Spring,Spring MVC,My Batis,Apache Shiro and other technical frameworks for implementation,with good scalability and maintainability.The system realizes the functions of project management,evaluation management and system management,and provides an efficient and convenient solution for the management of information system grade protection evaluation project.The evaluation script is implemented using Shell,SQL and Bat batch processing languages,which can be correctly executed in the system and database,and improve the efficiency of the grade evaluation.After practical testing,the system and evaluation script can meet the needs of the rating protection evaluation institutions,and have certain practical value and promotion prospects.