信息安全风险概率计算的贝叶斯网络模型  

Planning Exploitation Graph-Bayesian networks Model for Information Security Risk Frequency Measurement

作　　者：王桢珍[1] 姜欣[2] 武小悦[1] 谭旭[3] 

机构地区：[1]国防科学技术大学信息系统与管理学院,湖南长沙410073 [2]清华大学计算机科学与技术系,北京100084 [3]深圳信息职业技术学院计算机应用系,广东深圳510829

出　　处：《电子学报》2010年第B02期18-22,共5页Acta Electronica Sinica

基　　金：国家自然科学基金(No.70771109)

摘　　要：构建了一个基于贝叶斯网络的信息安全风险概率计算模型，并保证其可扩展性、精确性和客观性.模型的网络结构以规划渗透图表现，模型网络参数由专家知识确定并利用贝叶斯学习对其进行更新.实例分析表明构建的模型可以正确量化评估信息安全风险概率.A planning exploitation graph-bayesian networks model that can be applied in measurement of information security risk frequency is proposed, and the model＇s scalability, accuracy and objectivity are achieved. The model graph structure is deter- mined by Planning Exploitation Graph, the local conditional probability distributions are computed by combination of expertise knowledge and the maximum entropy prior probability distribution method,and the model parameters are updated with training data by Bayesian networks learning. The analysis of the example shows the model could evaluate the information security risk frequency successfully.

关 键 词：风险评估 贝叶斯网络 规划渗透图 贝叶斯学习 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]