一种新的网络安全态势评估方法  

A New Method for Network Security Situation Assessment

作　　者：杨宏宇[1] 褚润林[1] 李东博[1] 

机构地区：[1]中国民航大学计算机科学与技术学院,天津300300

出　　处：《微电子学与计算机》2015年第1期29-34,共6页Microelectronics & Computer

基　　金：国家自然科学基金(60776807;61179045);国家科技重大专项(2012ZX03002002);国家"八六三"计划重点课题(2006AA12A106);天津市科技计划重点项目(09JCZDJC16800);中国民航科技基金(MHRD201009;MHRD201205)

摘　　要：提出了基于隶属云的网络安全态势评估方法.首先从传输服务、资产、脆弱性、安全事件和物理设备五个维度入手,构建一种多层次、多维度、可扩展的网络安全评估指标体系,并给出各维度指标的预处理方法.然后设计了包含数据层、信息层和知识层的三层模型框架,给出了指标标准化及权重计算方法、安全态势计算流程并给出态势计算方法.最后设计了网络安全态势评估实验平台并进行了仿真验证实验.实验结果表明提出的方法对网络安全态势评估具有很好的有效性和合理性.This paper presents a method of network security situation assessment based on membership cloud model.Firstly,a multi-level and multi-dimensional extensible network security evaluation index system were built in terms of transport services,assets,vulnerabilities,security events and physical equipments,and an index pretreatment method was designed for each dimension.Secondly,a three-layer model framework which included the data layer,the information layer and the knowledge layer was designed,and the index standardization and weight calculation method,the security situation calculation process were given,and the network security situation assessment algorithm was designed.Finally,we designed the network security situation assessment platform and simulated the experiment on the platform.The experimental results show that the effectiveness and rationality of our method is fine.

关 键 词：网络安全 指标体系 隶属云 态势评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]