安全评估结果不确定问题研究

安全评估结果不确定问题研究 Research of Assessment Result Uncertainty 夏冰 XIA Bing1 1 2 first-author 高亮 GAO Liang3 3 郑秋生 ZHENG Qiusheng1 1 2 中原工学院计算机学院 中原工学院计算机学院 School of Computer Science,Zhongyuan University of Technology School of Computer Science,Zhongyuan University of Technology 郑州市计算机网络安全评估技术重点实验室 郑州市计算机网络安全评估技术重点实验室 Zhengzhou Key Laboratory of Computer Network Security Assessment Zhengzhou Key Laboratory of Computer Network Security Assessment 中原工学院软件学院 中原工学院软件学院 Software College,Zhongyuan University of Technology Software College,Zhongyuan University of Technology 针对评估结果不确定性造成决策层无法感知信息安全的整体保障水平,当前解决方案较少考虑数据元素间的融合和关系等问题,本文提出一种基于D-S理论的安全评估结果不确定性解决方案.方案从36个方面动态多角度收集原始证据,按照对应关系进一步将原始证据形成5部分评估证据,借助统计模型生成评估证据所需贡献矩阵,融合D-S证据理论,采用单点信任度值大的作为本次安全评估的结果.实验表明,方案解决了主机安全评估结果带来的不确定性,具有通用性特色. Due to the uncertainty of assessment results,the level of information security is difficult to be perceived.However,there are few solutions focusing on the data integration and relation.In this paper,we propose a solution to deal with the uncertainty of assessment results based on the D-S evidence theory.We first dynamically collect the original evidence from 36 aspects.Then,we form five parts of assessment evidence according to the corresponding relation,and generate the contribution matrix using the statistic model.Based on this,we take the maximum trusted single-point value as the assessment result.Our experiments suggest that the proposed solution is efficient and universal to solve the problem of uncertainty. 安全评估 不确定性 原始证据 评估证据 D-S证据理论 security assessment result uncertainty original evidence assessment evidence D-S evidence theory 10.14188/j.1671-8836.2013.02.012 TP393.08 河南省科技攻关项目（112102310368）;河南省教育厅科技攻关项目（2011A520050）资助 2013-02-01 2021-04-01 2 59