摘要
传统的网络安全态势量化评估方法主要面向宏观网络安全态势,未针对安全价值较高的网络设备,给出了高安全属性价值设备的定义,设计了针对设备的威胁态势量化评估框架和评估指标,根据评估框架和指标提出了高安全属性价值设备威胁态势量化评估方法。对具体网络中实际设备的评估结果表明,该方法能够准确、有效地量化评估高安全属性价值设备的威胁态势。
Traditional network security situational assessment is mainly for the macro network security situation,not for the specific equipment,especially for the key network device.A conception about the higher secure attribute value device was introduced,based on which a threat situational assessment research framework was presented and assessment indexes were discussed.A quantitative threat situational assessment method for higher secure attribute value device was proposed based on assessment research framework and assessment indexes.The experiment results show that the proposed method can assess device threat situation accurately and effectively.Meanwhile,the method is more general and objective than traditional methods.
作者
韩磊
刘吉强
王健
石波
和旭东
HAN Lei;LIU Jiqiang;WANG Jian;SHI Bo;HE Xudong(Beijing Institute of Computer Technology and Applications,Beijing 100854,China;Science and Technology on Information Assurance Laboratory,Beijing 100072,China;Key Laboratory of Security and Privacy in Intelligent Transportation,Beijing Jiaotong University,Beijing 100044,China)
出处
《网络与信息安全学报》
2020年第5期54-66,共13页
Chinese Journal of Network and Information Security
基金
国家自然科学基金(61672092)
国防基础科研(JCKY2017204B063)
中央高校基本科研业务费专项基金(2018JBZ103)
山东省重大科技创新工程(2019JZZY020128)
中国博士后科学基金(2018M633698)。
关键词
态势感知
安全威胁
量化评估
高安全属性价值设备
situational awareness
security threat
quantitative evaluation
higher security attribute value device
