基于情景感知的网络安全风险评估模型与方法  

Network Security Risk Assessment Model and Method Based on Situation Awareness

作　　者：戚湧[1] 王艳[1] 李千目[1] 

机构地区：[1]南京理工大学计算机学院,南京210094

出　　处：《计算机工程》2013年第4期158-164,共7页Computer Engineering

基　　金：国家自然科学基金资助项目(61272419);中国航天CAST创新基金资助项目(CAST200839);中国航天CALT创新基金资助项目(CALT201102)

摘　　要：现有情景感知框架对网络安全风险评估没有精确的量化方法,为此,结合DS证据理论和协商目标风险分析系统,提出一种基于情景感知框架的网络安全风险评估模型。基于DS理论进行网络安全威胁信息融合和情景识别,采用概率风险分析进行逐层风险量化和网络安全风险判别,并以低轨道卫星通信网为例进行网络安全风险评估仿真实验,结果验证了该评估模型和方法能有效识别威胁情景,并提高风险评估判别的准确性。In view of network security situation awareness framework＇s lack of a precise mathematical quantitative method to network information security risk assessment, a network risk assessment model based on network security situation awareness framework is proposed by combining DS evidence theory and Consultative Objective Risk Analysis System（CORAS）. Network security threats information fusion and situation perception based on DS evidence theory, hierarchical risk quantitative analysis based on probabilistic risk analysis, and risk discrimination. Low earth orbit satellite communication network is taken as an example to make a simulation and assessment. Experimental results show the proposed model and method can effectively identify threat situation, and increase the accuracy of risk assessment discriminant.

关 键 词：DS证据理论 协商目标风险分析系统 情景感知 低轨道卫星通信 网络安全 风险评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]