基于贝叶斯网络的多属性信息安全风险评估  

Risk Assessment of Multi-attribute Information Security based on Bayesian Network

作　　者：张俊锋[1] 任勋益[1] 王汝传[1,2] 

机构地区：[1]南京邮电大学计算机学院,江苏南京210003 [2]南京大学计算机软件新技术国家重点实验室,江苏南京210093

出　　处：《计算机安全》2010年第9期4-5,9,共3页Network & Computer Security

基　　金：国家自然科学基金(60973139;60773041);南京邮电大学引进人才项目(NY208006)

摘　　要：对基于贝叶斯网络的多属性信息安全风险评估方法研究,结合历史上发生的安全事件资料,评估安全威胁和脆弱性的概率,计算出各安全要素的风险值。对信息系统风险评估进行量化,使评估结果更加科学和客观。A security risk assessment on Bayesian network and multi-attribute was presented.Firstly,integration with the information of security incidents in the history,assess the probability of security threats and vulnerabilities of the various security elements.Then,the risk of the various security elements was calculated.The risk assessment of the information systems was quantified,so that the result of the assessment was more scientific and objective.

关 键 词：信息系统 贝叶斯 多属性 风险评估 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]