面向空管信息系统网络安全的量化评估方法  

Quantitative Evaluation Method for Network Security of ATC Information System

作　　者：顾兆军[1,2] 杨文 隋翯 GU Zhao-jun;YANG Wen;SUI He(Information Security Evaluation Center,Civil Aviation University of China,Tianjin 300300,China;School of Computer Science and Technology,Civil Aviation University of China,Tianjin 300300,China;School of Aeronautical Engineering,Civil Aviation University of China,Tianjin 300300,China)

机构地区：[1]中国民航大学信息安全测评中心,天津300300 [2]中国民航大学计算机科学与技术学院,天津300300 [3]中国民航大学航空工程学院,天津300300

出　　处：《计算机仿真》2024年第6期24-30,共7页Computer Simulation

基　　金：中国民航大学信息安全测评中心开放基金(ISECCA-202103);民航安全能力建设基金(PESA2022093)。

摘　　要：随着“智慧空管”建设不断推进,对空管信息系统的安全性要求逐步提高。为了及时发现空管信息系统存在的风险,提出一种面向空管信息系统网络安全的量化评估方法。结合空管信息系统结构复杂、业务繁多等特点,从技术和管理两方面确定了网络安全评估指标体系;首先运用序关系分析法确定评估指标权重,引入决策实验室法能考虑到因素之间的影响,达到了优化指标权重的效果,进而构建基于云模型的网络安全评估模型,从而确定风险等级。最后选取多个具体的空管信息系统为例进行网络安全评估,验证了该评估模型的可用性和有效性。With the continuous advancement of the construction of"smart air traffic control",the security requirements for the air traffic control information system have gradually increased.In order to find out the risks existing in the air traffic control information system in time,a quantitative assessment method for the network security of the air traffic control information system was proposed.Combining the characteristics of the air traffic control information system with complex structure and various services,the network security assessment index system was determined from the aspects of technology and management.Firstly,the Gl method was used to determine the weight of the evaluation indicators,and the DEMATEL method was introduced to take into account the influence of factors to achieve the effect of optimizing the weight of the indicators.Then a network security evaluation model based on the cloud model was constructed to determine the risk level.Finally,several specific air traffic control information systems were selected as examples to conduct network security assessment,which verifies the availability and effectiveness of the assessment model.

关 键 词：空管信息系统 量化评估 序关系分析法 决策实验室法 云模型 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]