层次化网络安全威胁态势评估技术研究

摘要

为了评估大规模网络系统的安全状态,针对机密性、完整性和可用性,采用层次化分析方法,建立一种网络安全威胁态势量化评估模型.该模型包括一套分为服务、主机、子网、全网四层的安全威胁态势指标和各项指标的量化计算方法.实验结果表明,该模型具有较好的可操作性,能够准确、直观地刻画网络系统的安全演化过程.%In order to estimate the security situation of large-scale network, this paper aimed at confidentiality, integrality and availability, adopted hierarchical analysis, and put forward a quantitative evaluation model for network security threats situation. This model included a suit of security threat situation indices composed of service, host, subnet and whole network, and quantitative calculation method for each index. Experimental results show the easy operation of this model, and it depicts the safety evolution process of network system accurately and intuitively.