基于D-S证据理论的信息安全风险评估  

Information security risk evaluation based on D-S evidence theory

作　　者：朱静[1] 高会生[1] 李聪聪[2] 

机构地区：[1]华北电力大学电气与电子工程学院,河北保定071003 [2]河北农业大学机电学院,河北保定071001

出　　处：《华北电力大学学报（自然科学版）》2008年第4期102-108,共7页Journal of North China Electric Power University：Natural Science Edition

摘　　要：采用Dempster-Shafer(D-S)证据理论处理信息安全风险评估中的不确定性问题,提出了基于D-S证据理论的风险评估模型。用改进的Dempster合成法则即对基本可信度分配使用"折扣率"的方法,对信息系统中存在的各种风险因素进行合成,处理风险因素中的不确定性,并通过仿真证明了该算法的正确性。最后,通过与模糊综合评判法进行比较验证了证据理论具有更高的准确性。Dempster-Shafer （D-S） evidence theory was applied to treat the uncertainty of the information security risk evaluation. A risk evaluation model based on D-S evidence theory was proposed. The improved Demspter＇ s rule of eombination of evidence was used to combine the risk factors of information system. It reduced the uncertainty of risk factors. The improved Demspter＇ s rule of combination of evidence, i. e. discount ratio, is used in basic belief assignment to combine kinds of risk factors. By simulation analysis, the correctness of the algorithm was proved. Finally, it was verified that evidence theory had higher accuracy than fuzzy comprehensive evaluation method.

关 键 词：信息安全 风险评估 Dempster-Shafer(D-S)证据理论 Dempster合成法则 指标体系 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]