基于实时告警的层次化网络安全风险评估方法  

Hierarchical risk assessment method for network security based on real-time warning

作　　者：梁礼[1] 杨君刚[2] 朱广良[3] 张倩[4] 

机构地区：[1]西安通信学院研究生管理大队,陕西西安710106 [2]西安通信学院信息传输系,陕西西安710106 [3]西安通信学院训练部,陕西西安710106 [4]西安通信学院信息服务系,陕西西安710106

出　　处：《计算机工程与设计》2013年第7期2315-2323,共9页Computer Engineering and Design

基　　金：陕西省自然科学基金项目(2011JM8033)

摘　　要：为了准确地评估网络安全风险,提高网络的整体安全性,提出了基于实时告警的层次化网络安全风险评估方法。提出了一种包含服务、主机和网络3级的网络分层风险评估模型。在此基础上以IDS(intrusion detection system)作为数据源,以威胁对象价值、脆弱性严重程度和威胁出现的频率作为核心变量,针对威胁攻击对象的不同进行分类计算,通过加权的方式计算网络各层的安全风险值。分别以实验室网络环境及校园网环境为实例,表明了该方法的准确性和有效性。To exactly assess the security risk of a network and enhance the performance, a hierarchical risk assessment method for network security based on real-time warning is presented. Firstly, a hierarchical risk assessment model for computer net- works is developed. This model can provide three hierarchies： services, hosts and local networks. IDS （intrusion detection system） is as a data source. Then, the risk indexes of at service level, host level and local network level is calculated by weighting based on the value of threat object, attack frequency and vulnerability severity. Finally, the accuracy and validity of the proposed method are demonstrated by the experiments.

关 键 词：网络安全 风险评估 实时告警 层次化模型 威胁 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]