一种信息系统生存性的量化分析框架  

A Framework of Quantitative Analysis for Information System Survivability

作　　者：林雪纲[1] 许榕生[2] 熊华 朱淼良[1] 

机构地区：[1]浙江大学人工智能研究所,杭州310027 [2]中国科学院高能物理研究所计算中心,北京100049 [3]总参第五十四研究所,北京100083

出　　处：《电子与信息学报》2006年第9期1721-1726,共6页Journal of Electronics & Information Technology

基　　金：国家"973"项目(G1999035806)资助课题

摘　　要：生存性是信息系统在安全性之上必需考虑的问题,对其量化分析可对系统生存性做出更为准确的评价以改进系统。基于有限状态机描述信息系统,利用系统状态转移图来定义生存性分析过程,而系统状态的层次化结构避免了Markov链模型中的列举系统状态问题。在SNA方法的基础上,提出一种便于计算机实现的生存性量化分析框架:通过系统定义、系统生存性测试和生存性计算,最后给出分析报告。其中基于事件分类分级建立的事件库使得测试方案的生成自动化和客观化,系统的生存性通过层次化的方式从可抵抗性、可识别性和可恢复性3个方面进行了量化计算。Survivability should be considered beyond security for information system, and quantitative analysis can assess system survivability accurately for improvement. Information system is presented by finite state machine and its state transition map is used to describe analysis process, where the hierarchical structure of system state avoids the problem of enumerating states in Markov chain model. Based on SNA method, a framework of quantitative analysis is introduced： defining system, testing system＇s survivability, computing survivability, and giving analysis report finally, which is easily implemented by computer. In the framework, the event database which is based on event classification and grade makes creating test project automatically and objectively, and survivability is computed through resistance, recognition and recovery in a hierarchical process.

关 键 词：生存性 信息系统 量化分析 分析框架 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]