基于安全保障能力的网络安全策略评估  

Assessment of Network Security Policy Based on Security Capability

作　　者：唐成华[1] 余顺争[1] 

机构地区：[1]中山大学电子与通信工程系,广东广州510275

出　　处：《武汉大学学报（理学版）》2009年第1期109-112,共4页Journal of Wuhan University:Natural Science Edition

基　　金：国家高技术研究发展计划(863)项目(2007AA01Z449);中国博士后科学基金资助项目(20070420793)

摘　　要：为了有效地对网络安全策略的正确性进行验证,提出了一种基于安全保障能力的网络安全策略评估模型.在安全域的划分和策略建立的基础上,通过对安全策略各特征属性之间关系的分析,建立了其安全防御方式对策略应用对象的保护因子和策略应用对象对信息安全属性的敏感因子,进而获得策略的安全因子值,达到评估策略安全保障能力的目的.结果表明,该模型能有效地反映安全策略的安全保障能力,为网络安全策略的评估提供了一种新的解决途径.For the purpose of verifying the validity of network security policy effectively,an assessment model of network security policy based on security capability is proposed.Based on the establishment of security domain and security policy,the relationship of defense means,application targets,and information security attribute characteristics is analyzed,the protection factor and sensitivity factor are established,and then the value of security policy safety factor is obtained in order to assess the capability of the security policy capability.The result shows that the model can effectively reflect the protection ability of security policy and provide a new solution for assessing security polices.

关 键 词：安全保障 安全策略 网络安全 完备性 正确性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]