一种基于实体行为风险评估的信任计算方法  

Method for trust computation based on behavior risk evaluation

作　　者：武小年[1,2] 张润莲[1,3] 周胜源[1,2] 

机构地区：[1]桂林电子科技大学信息与通信学院,广西桂林541004 [2]现代通信国家重点实验室,成都610041 [3]西安交通大学电子与信息工程学院,西安710049

出　　处：《计算机应用》2009年第5期1305-1307,共3页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60773118);现代通信国家重点实验室基金资助项目(9140C1101050706);广西信息与通讯技术重点实验室基金资助项目(10908)

摘　　要：在分布、动态环境中,风险和信任是影响安全决策的关键因素。基于安全风险评估原理,提出一种基于实体行为风险评估的信任计算方法。该方法通过识别并量化信息资产的重要性和实体行为威胁的严重性,给出了实体行为风险量化和实体信任度的计算方法。应用实例及计算结果表明,该方法能够正确地识别实体的风险变化,并能通过信任度计算为系统正确地控制实体的后续行为提供客观支持。Risk and trust are key factors impacting on environments. According to information risk evaluation theory, the security decision-making in the distributed and dynamic the author proposed a method for trust computation based on behavior risk evaluation. The proposed method described risk quantification method by identifying and quantifying the significance of assets and the criticality of threats from the behaviors of entities, and designed trust computation methods based on the quantified risk. Experimental results show that the proposed method can correctly identify the changing risk implied in the behaviors of entities, and compute trust based on the changing risk. It can provide objective reference for the system to correctly control the follow-up behaviors of entities.

关 键 词：信任 风险 安全评估 风险量化 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]