基于FAHP和攻击树的信息系统安全风险评估  

Security risk assessment of information system based on FAHP and attack tree

作　　者：任秋洁 潘刚 白永强 米士超 Ren Qiujie;Pan Gang;Bai Yongqiang;Mi Shichao(Luoyang Institute of Science and Technology,Luoyang 471000,China;Luoyang Electronic Equipment Test Center of China,Luoyang 471003,China)

机构地区：[1]洛阳理工学院,河南洛阳471000 [2]洛阳电子装备试验中心,河南洛阳471003

出　　处：《电子技术应用》2018年第8期113-117,共5页Application of Electronic Technique

基　　金：国家自然科学基金(61372039);洛阳理工学院青年基金(2017QZ05)

摘　　要：为进一步提高信息系统安全风险评估结果的准确性和可用性,降低主观因素的影响,以模糊层次分析法和攻击树模型为基础,对信息系统的安全风险进行评估。首先,采用攻击树模型描述系统可能遭受的攻击;其次,假定各叶节点具有不同的安全属性,采用模糊层次分析法求解各安全属性的权值,为降低专家评分的主观因素影响,假定各属性得分为区间变量,建立基于区间变量的属性概率发生模型。最后,采用实例进行分析验证,结果表明该方法不仅进一步降低了风险评估时主观因素的影响,且思路清晰,方法简单,具有较强的通用性和工程应用价值。In order to improve the accuracy and serviceability of information system security risk assessment and reduce the impact of subjective factors in risk assessment, based on fuzzy analytic hierarchy process and attack tree model, the security risk of infor-mation system is evaluated. Firstly, the attack tree model is used to describe the possible attack path. And then, the attack proba-bility is calculated, assuming that each leaf node has different security properties. Fuzzy AHP method is adopted to solve the secu-rity attribute weights. To reduce the influence of subjective factors during expert scoring, assuming that attribute scores are interval variables, an attribute probability generation model based on interval variables is established. Finally, an example is used to verify the analysis. It shows that this method not only reduces the influence of subjective factors in risk assessment, but also has clear thinking and simple methods. It has versatility and engineering application value.

关 键 词：攻击树 安全风险 模糊层次分析法 信息系统 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]