基于威胁分析的网站安全风险评估方法  

Security risk assessment method of website based on threat analysis

作　　者：陆向艳[1] 钟诚[1] 杨柳[1] 

机构地区：[1]广西大学计算机与电子信息学院,南宁530004

出　　处：《计算机应用》2009年第B12期94-96,共3页journal of Computer Applications

基　　金：广西科学基金资助项目(桂科自0728033);广西高校人才小高地建设创新团队资助计划(桂教人[2007]71号);广西大学科研基金项目(X022088)

摘　　要：提出了一种基于威胁分析的网站安全风险评估方法。该方法以威胁发生可能性和威胁产生后果损失为参数计算安全风险值,采用模糊评判法对参数进行定量计算。实例分析结果表明该方法准确、简单,具有较好的实际效果。A security risk assessment method of website based on thread analysis was presented. The method used the possibility of thread occurrence and consequence that cause thread as parameters to compute security risk. And fuzzy evaluation was used to compute the two parameters. The experimental results indicate that this method is accurate, simple and practical.

关 键 词：网站 风险评估 威胁分析 风险计算 模糊评判法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]