基于访问控制权限的网络节点安全评估方法  

The Security Evaluation Method of Network Node Based on the Access Control Private

作　　者：程克勤[1,2] 蒋凡[1] 曾凡平[1] 

机构地区：[1]中国科学技术大学计算机科学技术系 [2]合肥工业大学网络中心,合肥230009

出　　处：《计算机工程与应用》2004年第23期155-157,229,共4页Computer Engineering and Applications

摘　　要：网络安全评估的难点在于如何选择和分析各种影响网络安全的因素及其属性。文章提出一种新的思路和评估方法,即从影响计算机安全的众多复杂因素中选取起关键作用的用户访问权限作为评估因素,通过对影响用户访问权限的漏洞进行定性、定量的分析,得出节点失去控制权限的途径总数和风险系数,评估网络节点的安全状况。The difficulty of network security evaluation is how to select and analyze the factors and their attributes,which are highly important to network security.In this paper,access control private is selected as evaluated attribute.It proposes a new method which adopts matrix to analyze the attributes of vulnerabilities to evaluate qualitatively and quantitatively the security status of network node.The total paths and risk index of the node losing its power control are obtained by this method.

关 键 词：网络安全 评估 访问控制权限 漏洞 用户访问权限 风险分析 网络节点 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]