一种基于风险评估的信任模型  

Trust model based on risk evaluation

作　　者：姜东兴[1] 叶震[1] 

机构地区：[1]合肥工业大学计算机与信息学院,合肥230009

出　　处：《微计算机信息》2012年第4期122-124,共3页Control & Automation

摘　　要：在分布式、动态网络环境中,实体之间的信任关系成为安全问题的重点。现有的信任模型研究大多是将风险评估看作信任的一种补充,甚至忽略了风险评估的影响,这将导致安全决策的片面性。针对这个问题,提出了一种基于风险评估的信任模型。该模型通过识别并量化系统的资产重要性、脆弱性严重性和威胁严重性,给出了基于风险评估的信任计算方法。In distributed and dynamic network environment,the trust relationship between entities be the key problem in security area. the existing trust models mostly regard risk evaluation as a supplement to trust,or neglect risk.this will result in that the security decision is unilateral. According to this problem,the author proposed a method for trust computation based on risk evaluation.the computation described risk quantification method by identifying and quantifying the significance of assets ,criticality of threats and vulnerability of threats,and a trust computation method based on risk evaluation was designed.

关 键 词：风险评估 信任模型 

分 类 号：TP393.01[自动化与计算机技术—计算机应用技术]