Network Security Risk Analysis Based on Graph Theoretical Methods

摘要

Nowadays, network security becomes an important topic. The concept and framework of general risk Management also has been applied to network security risk. In this paper, the basic model of information security risk, also with risk analysis approaches is reviewed. Generally two types of approaches are followed in risk assessment: quantitative approaches and qualitative approaches. Most of current methods for the security risk analysis are primitive and can't reflect the physical structure of the system. Based on the basic model of security risk, the probability of control failure (PCF) of countermeasures is a critical variable in risk analysis, which depends on the effectiveness of the countermeasures for the specific threat. Generally speaking, the effectiveness of the countermeasures is decided by the quantity, quality and combination of the countermeasures. The combination of" the countermeasure set depends on the location of countermeasures in the network. A graph is a set of nodes joined together by edges or arcs. Graph theoretical methods have long been used to discuss issues in computer security. In this paper, a new graphic method is put forward one considering the characteristics of network security risk. Better than the general risk analysis methods, the graph theoretical method in this paper can reflect the location of countermeasures in the network. Then, the solution having a reference to Dijkstra Algorithm also is put forward.