摘要
为有效评估网络信息系统(NIS)的可生存性,将联合分析法和层次分析法有机结合,提出一种综合评价方法。借鉴网络安全等级的思想,对NIS不同方面重要性进行分级,获取用户期望产品和目标的价值和优先权,解决评估NIS的可生存性问题。通过在两个层次上对NIS进行测量:一是调查NIS关于组织策略目标的各方面的全局性能;二是专门调查NIS可生存性的性能,即在受到攻击时如何维持自身的性能。实验结果表明该方法有效,并易于推广应用。利用该方法调查与可生存性相关的性能,帮助NIS管理者在安全与耗费之间做出权衡,以保证NIS可生存性的最佳安全等级。
In order to evaluate the survivability of network information systems,an overall method for assessing is presented based on the integrity of conjoint analysis and AHP.The idea of network security levels is used for reference.Different aspects of NIS are graded into vary levels.With the value and priority,the problem of evaluating NIS survivability is solved.The assessment of NIS is constructed on two levels.One focuses on the investigation about the global performance,another is specialized on the performance of survivability.The experiment results show that the method is valid and is applied easily.Based on the investigation of the performance of NIS survivability,this helps NIS managers make tradeoffs between security and cost.The best security level of NIS survivability is guaranteed.
出处
《计算机工程与应用》
CSCD
北大核心
2009年第14期18-21,共4页
Computer Engineering and Applications
基金
国家高技术研究发展计划(863)No.2007AA01Z432
No.2007AA01Z433~~
关键词
网络信息系统
可生存性
联合分析
层次分析法
Network Information System（NIS）
survivability
conjoint analysis
Analytic Hierarchy Process（AHP）
