基于未确知数学的网络安全风险评估模型  

A Network Security Risk Assessment Model Based on Unascertained Mathematics

作　　者：陈建莉[1] 

机构地区：[1]武警工程大学理学院,陕西西安710086

出　　处：《空军工程大学学报（自然科学版）》2014年第2期91-94,共4页Journal of Air Force Engineering University(Natural Science Edition)

基　　金：陕西省自然科学基金资助项目(2013JM1018);武警工程大学自然科学基金资助项目(WJY201302)

摘　　要：结合网络安全评价中存在诸多不确定因素的特点,提出一种基于未确知数学理论的网络安全综合评价新方法。分析了网络安全风险的因素,建立了网络安全风险评价因素的指标体系和评价等级空间。在分析网络安全风险因素的基础上,建立了网络安全风险评价因素的指标体系和评价等级空间,将未确知数学的方法运用于网络安全风险的综合评估中,在未确知测度理论的基础上,定义了未确知测度期望、未确知评价等级二值效应量值、综合评价的未确知测度向量、未确知等级二值效应期望和二值效应方差等新的未确知数学概念。在新的未确知概念的基础上,建立了网络安全风险综合评估的未确知数学模型。并用实例对该模型进行了应用,评价结果用一个未确知有理数来表示更符合实际。实例表明该方法计算简单科学有效,为网络安全综合评价提供了一种新途径。In view of many uncertain factors existing in the characteristics of network security evaluation, a new network security comprehensive evaluation method is proposed based on the unascertained mathemat- ics theory. Based on the analysis of network security risk, the index system and evaluation space of net- work security risk evaluation factors are established. The unascertained mathematical method is used in the network security risk comprehensive evaluation, and based on the theory of unascertained mathematics, the new unascertained mathematics concept of unascertained measurement expectation, comprehensive e- valuation unascertained measure vector, the unascertained evaluation two value effect expectation and two value effect variance are defined. Based on the new unascertained concept, an unascertained mathematic model of network security risk comprehensive evaluation is established. The model is applied by real exam- ple, and the evaluation result is expressed by an unascertained rational number. The example shows that the method is simple and effective. This study provides a new way for the network security comprehensive evaluation.

关 键 词：网络安全 风险评估 未确知数学 

分 类 号：O29[理学—应用数学]