面向安全管理的定量安全评估模型  

Quantitative Security Evaluation Model for Security Management

作　　者：栗志果[1] 曾庆凯[1] 

机构地区：[1]南京大学计算机软件新技术国家重点实验室

出　　处：《计算机工程》2008年第2期105-107,共3页Computer Engineering

基　　金：国家“863”计划基金资助项目(2004AA147070);国家自然科学基金资助项目(60473053);江苏省自然科学基金资助项目(BK2005074)

摘　　要：提出面向安全管理的系统安全评估模型贝叶斯功能网络,采用风险分析方法建立反映安全功能和威胁关系的贝叶斯信念网络,可以对功能组件缺失程度及其对系统安全的影响进行量化评估。实验表明,模型不仅可用于系统的安全评估比较,而且能够指出系统存在的缺陷以便优化和改进。This paper proposes a quantitative security evaluation model, BFN, which reflects the probability relationship between functional components and threats in a system, based on risk analysis approach, By this model it can quantitatively evaluate the deficiency in functional components of a system as well as its impact on the system. The experiments demonstrate that the model can compare different systems in security, and optimize a system by analyzing its weakness.

关 键 词：安全评估 定量安全评估 贝叶斯功能网络 风险分析 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]