面向西藏高校Web站点的安全评估方法  

Research on the Security Evaluation Method for the Websites of Tibetan Universities

作　　者：郭晓军[1,2] 周鹏举 张千帆 GUO Xiaojun;ZHOU Pengju;ZHANG Qianfan(School of Information Engineering,Xizang Minzu University,Xianyang 712082,Shaanxi,China;Key Laboratory of Optical Information Processing and Visualization Technology of Tibet Autonomous Region,Xizang Minzu University,Xianyang 712082,Shaanxi,China)

机构地区：[1]西藏民族大学信息工程学院,陕西咸阳712082 [2]西藏民族大学西藏自治区光信息处理与可视化技术重点实验室,陕西咸阳712082

出　　处：《实验室研究与探索》2022年第4期31-34,83,共5页Research and Exploration In Laboratory

基　　金：西藏自治区自然科学基金项目(XZ2019ZRG-36(Z));西藏民族大学“藏秦喜马拉雅人才发展支持计划-杰出青年学者”项目(324011810216);西藏民族大学“涉藏网络信息内容与数据安全团队”项目(324042000709)。

摘　　要：针对西藏教育类Web站点安全评估缺乏有效、统一标准等问题,从用户角度提出一种基于线性组合赋权法的Web站点安全评估方法。该方法对威胁Web站点安全的风险因素进行分类得出12个评价对象,通过主观赋权法与客观赋权法融合的线性组合赋权法计算得出评价对象的权重,根据划分的网络安全风险等级判断该评价对象的危险程度,得出Web站点的整体安全评估值,并在西藏地区高校Web站点进行了测试。结果表明,该模型表现出较高的准确率和良好的泛化能力,较好地解决了西藏地区高校Web站点的安全评估问题。In view of the lack of effective and unified standards for security assessment methods of Tibetan educational Websites,this paper proposes a Website security assessment method based on linear combination weighting method(LCWM).The method classifies the risk factors that threaten the security of a website to derive 12 evaluation objects,calculates evaluation objects by a linear combination of subjective and objective weighting methods.The risk level of this evaluation object is judged according to the network security risk level,and the overall security assessment value of the website is finally derived.The results show that the model exhibits extremely high accuracy and good generalization ability,which better solves the security assessment problem of Tibetan educational websites.

关 键 词：WEB安全 主观赋权法 客观赋权法 线性组合赋权法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]