ecurity baseline is the minimum security guarantee of a business system.The content of security baseline is discussed,system security state baseline and its goals are focused and presented.Proposes four mechanics of creating state security baseline of a specified system,and comparison of those techniques is made.Introduces an open source system security state baseline creating tool named FTimes,and set up a test bed to implement automation functions of creating baseline and change detection.