基于熵权法的密码模块安全保障能力评估  

Security assurance capability assessment based on entropy weight method for cryptographic module

作　　者：粟登银[1] 徐开勇[1] 高杨[1] 

机构地区：[1]信息工程大学电子技术学院,郑州450004

出　　处：《计算机应用》2012年第1期115-118,共4页journal of Computer Applications

摘　　要：针对密码模块这类信息安全产品指标值不固定、指标系统难以建立、安全保障能力难以定量评估的问题,提出了一种定量描述密码模块安全保障能力的可行方法。方法运用区间数描述密码模块的安全属性,采用熵权法结合主观赋权法确定每个安全属性的权重值,运用区间型多属性决策方法进行综合评价,最后运用所提方法对两种商用密码模块进行了实例分析,计算结果表明所提方法可行。To solve the problems that the index value of cryptographic modules is not fixed,the index system is hardly built,and the security assurance ability can not be quantitatively assessed,a security assurance capability assessment for cryptographic module was proposed.The description on indexes by interval number was applied to illustrate the security attribute of cryptographic modules.This paper determined the weight vector of each period point by entropy weight coefficient method combined with expert decision weight method.According to the interval multi-attribute decision methodology,a feasible methodology was adopted to solve the interval Information Assurance（IA） capability evaluation problem of cryptographic modules.Finally,through analyzing two kinds of cryptographic modules,the experimental results show that the proposed method is feasible.

关 键 词：密码模块 熵权法 区间数 指标体系 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]