Information assurance conception model and applications for large-scale information systems

Governments and businesses rely more and more intensively on networks and information systems, information security has become a major challenge to most organizations, especially for national fundamental information networks and the key information systems. How to model and evaluate the security of an information system is an important topic not only for understanding its security state, but also for IA plan, programming and construction. An IA model is proposed in this paper, which includes four dimensions: IA capability; IA countermeasures, IA cost and time. This model can be used for an organization to devise IA plan, tailor its baseline strategies and analyze its security state.