1 概论 信息安全是一个不断发展和丰富的概念,它经历了从通信保密、计算机安全、信息安全到信息保障的演变,信息安全的需求也从保密性扩展到完整性、可用性、不可否认性和可控性。人们在不断探索和发展各种技术来满足信息安全需求的同时,逐渐认识到信息安全是一个综合的多层面的问题。一个完整的国家信息安全保障体系应包括信息安全法制体系、 1 Introduction Information Security is a constantly evolving and rich concept that has undergone the evolution from communication security, computer security, information security to information assurance. The demand for information security also extends from confidentiality to integrity, usability, non-repudiation and Controllability. While constantly exploring and developing various technologies to meet the information security needs, people are gradually realizing that information security is an integrated and multi-level issue. A complete national information security system should include the legal system of information security,