基于模糊层次分析的木马攻击效果评估技术研究  

Research on FAHP based Trojan attack effect evaluation

作　　者：曾辰熙 吴泉源[1] 李爱平[1] 江荣[1] ZENG Chen-xi WU Quan-yuan LI Ai-ping JIANG Rong(School of Computer Science, National University of Defense Technology, Changsha 410073, China)

机构地区：[1]国防科学技术大学计算机学院,湖南长沙410073

出　　处：《网络与信息安全学报》2016年第7期49-58,共10页Chinese Journal of Network and Information Security

基　　金：国家重点研发计划网络空间安全专项基金资助项目(No.2016YFB0800803;No.2016YFB0800804;No.2016YFB0800303)~~

摘　　要：现有的网络攻击效果评估系统主要针对DDo S和蠕虫进行分析,缺乏对木马病毒的针对性。少数针对木马的危害度测量系统的指标值由人工标注,且都为定性值,稍欠客观性和全面性。基于该现状,从木马特性分析出发,建立针对木马病毒的层次化指标体系,设计指标值可定性也可定量,可人工标注也可系统采集。提出基于模糊层次分析的评估模型对木马攻击效果进行评估。同时,提出一种多对一的权重综合技术,对多组权重进行了合理的综合。最后,通过对比已有评估系统的评估结果,验证了所提评估技术的合理性。The particular characters of Trojan are not fully taken into consideration by existed network attack effect evaluation systems which mainly focus on DDo S and Warm. A few Trojan harm measurement systems is somewhat short for objectivity and completeness as the result of that its indicator values is confined to manually marked and qualitative values. Under the circumstances, the analysis of Trojan＇s features were started from, and a hierarchical index system which accepted both quantitative and qualitative values, and both manually marked and system collected values was built. Then, a FAHP based evaluation model was proposed to evaluate the Trojan attack effect. Meanwhile, a many-to-one method to ensemble multiple weight vectors was proposed. Finally, the rationality of proposed evaluation system was verified by comparison with others.

关 键 词：木马 攻击效果评估 模糊层次分析 指标权重 

分 类 号：TN915.08[电子电信—通信与信息系统]