SYSTEM AND METHOD FOR ASSESSING THE SECURITY POSTURE OF A NETWORK USING GOAL ORIENTED FUZZY LOGIC DICISION RULES

摘要

A method and data processing system for assessing security vulnerabilities in a network. A system object model database is created and supports the information data requirements of heterogeneous network vulnerability analysis programs. Only the requested data from the system object model database representing the network is introduced into the program, and the program interprets the network to generate data resulting from each program. These data results are stored in the common system model database and in the data fact base. A goal-directed fuzzy logic decision rule is applied to determine the degree of vulnerability of the system.