Evaluating Network Equipment Information Security Based on D-S Evidence Theory and Principal Components Analysis

摘要

Due to the lack of a unified evaluation system for a wide variety of network equipment and subjective issues in the evaluation, it is difficult to conduct a comprehensive assessment of information security for network equipment. This paper presents the evaluation framework and an indicator system for network equipment information security, which can provide the guidance. In order to reduce the subjectivity and uncertainty in evaluation, a method combining D-S theory evidence with Principal Components Analysis (PCA) is proposed. An evaluation of the method is conducted, and the result shows that the proposed method has achieved good results in practice.