2 ) based on the study and analysis of many security architecture standards , the security region and the defense layer are introduced , the information category , the threatening level and the security protection level ( spl ) are put forward , the methods and requires of the security analysis are discussed in this paper . 3 ) based on the security architecture model and the security analysis , the graded requires of the security management and the security technology is presented , so the security design of the cissa and the choice of security produces can be done conveniently . 4 ) a cooperative communication platform is designed and implemented to ensure the dynamic and cooperative ability of above cissa model 针对计算机信息系统安全体系模型和实施标准的不足，本文紧密围绕分层、分级、动态防御以及协同通信平台等关键技术开展研究工作，所做的工作主要集中在： 1 )在深入研究了当前各种流行的安全体系模型基础上，提出了用于指导计算机信息系统安全体系建设的动态纵深防御安全体系模型； 2 )在对各种安全体系标准进行研究与分析的基础上，引入了安全域和安全防护层次的概念，提出了信息类别、威胁级别和安全保障级别的定义，阐述了进行计算机信息系统安全分析的方法和要求； 3 )在安全体系模型和安全分析的基础上，提出了安全管理及安全技术的分级要求，从而便于进行计算机信息系统的安全设计以及产品的选型； 4 )设计并基本实现了用于保障上述安全体系动态协同能力的协同通信平台。
2.
The defense - in - dynamic & depth cissa model and the cooperative communication platform which are put forward in this paper have been applied into " the network intrusion detection , the warning and the security management technology " ( 863 program ) , which lays the foundations for the successful examination of 863 experts 本文所提出的动态纵深防御安全体系模型以及协同通信平台，已经在“网络入侵检测、预警和安全管理技术(战略预警) ” ( “十五” 863计划)中得到了应用，为863项目顺利通过验收打下了坚实的基础。
3.
With the scale of computer information system ( cis ) expanding and the security technology developing , a systematic and normalized computer information system security architecture ( cissa ) is needed to strengthen the design , development , implementation , evaluation and management of cissa . in order to normalize the build of cissa , and construct the security defense architecture in our country , a uniform cissa model and the implementary standard must be built 随着计算机信息系统规模的不断扩大和信息安全技术的不断发展，为了加强计算机信息系统安全体系的设计、开发、使用、评估和管理，需要对计算机信息系统安全体系进行系统化的认识和规范化的建设，因此必须建立统一的计算机信息系统安全体系模型和实施标准，规范计算机信息系统的安全体系建设，构筑我国计算机信息系统安全防范体系。
