网络靶场安全效能综合评估方法研究  

Research on comprehensive evaluation methods of security effectiveness in cyber range

作　　者：王晓菲 闫子淇 张茜 王亚洲 战海心 曾颖明 Wang Xiaofei;Yan Ziqi;Zhang Xi;Wang Yazhou;Zhan Haixin;Zeng Yingming(Beijing Institute of Computer Technology and Application,Beijing 100854,China)

机构地区：[1]北京计算机技术及应用研究所,北京100854

出　　处：《网络安全与数据治理》2024年第10期1-6,共6页CYBER SECURITY AND DATA GOVERNANCE

摘　　要：网络靶场已逐渐成为网络空间安全测试、验证、演练的重要基础设施,网络靶场安全效能的综合评估正是其开展安全测评和风险评估的重要依据。重点归纳了数学模型法、指标体系法、知识推理法等方法在网络安全效能综合评估中的不同应用,分析对比典型效能评估方法的优势、适用范围,以及其模型化、自动化、智能化程度,讨论已有工作的局限性,并指出未来发展趋势和后续研究展望。The cyber range has gradually become an important infrastructure for cyberspace security testing,verification and drills,and the comprehensive evaluation of cyber range security effectiveness is an important basis for security evaluation and risk assessment.This paper mainly summarizes the different applications of mathematical model method,index system method and knowledge reasoning method in the comprehensive evaluation of network security effectiveness.In addition,it analyzes and compares the advantages and application scopes of typical effectiveness evaluation methods,as well as the degree of modeling,automation and intelligence.Finally,the paper discusses current limitations and possible directions for future research.

关 键 词：安全测试 效能评估 网络靶场 数学模型 指标体系 知识推理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]