网络终端安全状况评估指标体系的研究  

Research on network terminal security assessment index system

作　　者：廖辉[1] 凌捷[1] 

机构地区：[1]广东工业大学计算机学院,广东广州510006

出　　处：《计算机工程与设计》2010年第5期961-964,共4页Computer Engineering and Design

基　　金：广东省自然科学基金项目(9151009001000043);广东省科技计划基金项目(0911050400004)

摘　　要：为了准确和全面地评估网络终端安全状况,完善网络信息安全保障体系,提出了一套评估网络终端安全状况的指标体系。该指标体系包含了网络终端资产、威胁和脆弱性的各个方面,减少了人为的主观因素影响。基于信息安全风险评估方法,建立了网络终端安全状况评估模型,利用层次模糊综合评价法及定性分析与定量计算相结合的评估技术对网络终端安全状况进行评估,并结合实例证明了该指标体系的合理性和可行性。To assess network terminal security accurately and improve network information security insurance system, a set of index system to assess network terminal security is proposed. This index system contained all of aspects of network terminal assets, threats and vulnerability, and decreased subjective effects of man-made. Based on the technique of risk assessment for information security, the assessment model of network terminal security is constructed. By multilevel fuzzy comprehensive judgment and evaluation technology of qualitative analysis and quantitative calculate, network terminal security is evaluated. Combined with examples, the experiment results show that the index system proposed is reasonable and feasible.

关 键 词：网络终端安全 风险评估 评估指标体系 层次模糊综合评价 评估模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]