基于三维球体模型的XML通信协议安全评估方法

摘要

Aiming at the problems of security assessment in XML communication protocols, a novel three-dimensional spherical model based protocol security evaluation method was proposed. Firstly, a three-dimensional security evaluation index system was constructed through positions of indexes on the spherical shell. Secondly, by using the coordinate’s projection area as a measure criterion, evaluation indexes’ weights of the first level and the second level were obtained with the analytic hierarchy process (AHP), the sphere radius and the sector angle. Thirdly, security components values of XML communication protocol were calculated in the aspects of XML’s content, communication load and security vulne-rability. Finally, the security evaluation result of XML communication protocol was achieved through quantization calcu-lation and further comprehensive analysis. Experimental results show that this method is competent for the protocol secu-rity evaluation and meets security evaluating requirements of XML communication protocols effectively.%　　针对XML通信协议的安全评估问题,提出了一种基于三维球体模型的协议安全评估方法。首先利用评估指标在球体外壳层的坐落位置构建XML通信协议的三维安全评估指标体系,以该坐标系投影面积为度量标准,运用层次分析法(AHP, analytic hierarchy process)、球体半径以及开合角度获取一、二级评估指标的权值。从XML协议的内容、通信载荷、安全隐患3个层面计算XML通信协议各安全分量的量化评估值,通过量化计算和综合分析得到 XML 通信协议的安全性评估结果。仿真结果表明该方法能有效地评估协议的安全性并可满足对 XML通信协议的安全性评估需要。