基于入侵攻击的生存性需求分析方法研究  

Research on method of survivable requirements analysis based on intrusion attack

作　　者：杨桦[1] 卢兴华[2] 邓高明[3] 杨磊[3] 

机构地区：[1]军械工程学院装备指挥与管理系,河北石家庄050003 [2]军械工程学院科研部,河北石家庄050003 [3]军械工程学院计算机工程系,河北石家庄050003

出　　处：《计算机工程与设计》2009年第3期552-554,565,共4页Computer Engineering and Design

基　　金：总装预研基金项目(9140A19020606JB3404)

摘　　要：入侵攻击是网络信息系统面临的主要威胁。根据以往记录的攻击数据,总结攻击发生的规律和特征,定义入侵情景,通过入侵情景的不同组元描述入侵攻击的特征。按照生存性特性定义生存性需求,明确生存性需求分析的目标。利用使用/入侵用例图与入侵攻击特征—生存性需求对照表相结合的方法,获取生存性需求,制订生存性服务策略,提高了分析结果的科学性和可读性。Intrusion attacks are the main threat of network information systems. The rules and characters of attack happening based on the records of past are summarized. Intrusion scenarios is defined and characters of attack are described by every element of intrusion scenarios. Survivable requirements according to the specialties＇ definitions are defined, the aims of survivable requirement analysis are confirmed. Combined use/intrusion use case diagram with attack character-survivable policy comparison table, survivable requirement and made survivability services policy are elicited and scientificity and readability about the result are increased.

关 键 词：入侵情景 攻击特征 生存性需求 用例图 需求分析 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论] TP393[自动化与计算机技术—计算机科学与技术]