在线监测的路由器安全威胁态势量化评估方法  

Method for router online security risk assessment quantification

作　　者：杨君刚[1] 梁礼[2] 刘故箐[1] 张倩[1] 张长青[2] 

机构地区：[1]西安通信学院信息传输系,陕西西安710106 [2]西安通信学院研究生管理大队,陕西西安7101061

出　　处：《通信学报》2013年第11期59-70,共12页Journal on Communications

基　　金：国家自然科学基金资助项目(61072125);陕西省自然科学基金资助项目(2011JM8033)~~

摘　　要：在对路由器安全问题本质分析基础上提出路由器安全效能的概念并对路由器攻击进行分类,提出一种在线监测的路由器安全威胁态势量化评估的计算方法。该方法在对路由器攻击分类的基础上,以路由器带宽占用率和CPU平均使用率计算服务下降型威胁安全风险因子,以威胁发生可能性和威胁严重程度计算权限提升型安全风险因子,结合路由器本身的重要性计算其安全风险,进而分析路由器的安全威胁态势。实验表明:所提方法能够很好地反映路由器的安全风险,为网络管理员提供直观的安全威胁态势,以便调整路由器安全策略,更好地提高其安全性能。The concept of router safety performance was proposed based on the nature of router security issues and router attacks were classified. Then a method for router online security risk assessment quantification was also presented. The security risk factor of service decline was calculated by router bandwidth consumption and average CPU usage and the security risk factor of privilege escalation was calculated by the possibility of threat occurrence and severity based on the router attack classification. The router security threat status was evaluated combining weighting the importance of router and the security risk factor. The experiment results show the method is effective in calculating the quantitive risk of the router and helpful for administrators to assess security risks.

关 键 词：路由器安全 威胁态势 在线监测 风险评估 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]