基于云模型的信息系统测评安全结论判定

基于云模型的信息系统测评安全结论判定 Determination of Safety Conclusion in Evaluating Information System Based on Cloud Model 张鹏 ZHANG Peng 1 first-author 谢晓尧 XIE Xiaoyao 1 贵州师范大学贵州省信息与计算科学重点实验室 贵州师范大学贵州省信息与计算科学重点实验室 Key Laboratory of Information and Computing Science of Guizhou Province,Guizhou Normal University Key Laboratory of Information and Computing Science of Guizhou Province,Guizhou Normal University 针对信息系统进行等级保护测评后得到的安全结论描述的模糊性,提出了一种基于云模型的智能且定量的判定方法.首先依据专家经验得到测评中对网络安全、主机安全、应用安全、数据安全、物理安全和安全管理这6大测评模块的测评结果的统一描述,进而得到相应模块的隶属云,再通过各模块隶属云的三个期望构建判定矩阵,最后得到测评结论的判定云图,实现了对测评结论的定量判定.通过实例验证表明:Y该判定方法可以有效地对测评结论进行定量度量,并给出精确的判定划分. The description of safety conclusion is fuzziness after doing the classified protection evaluation of information system.In order to solve this problem,we put forward an intelligence determining and quantitative calculating method based on cloud model.Firstly,according to experts’ experience,we unified the description of evaluation results containing network security module,host security module,application security module,data security module,physical security module and security management module to get the corresponding module of membership cloud.Secondly,we built the decision matrix by three expectations of each model’s membership cloud and in the last,we get the decision cloud chart which owns to the evaluation conclusion and realizes the quantitative determination.Experiments show our method is effective to get the quantitative evaluation conclusion and the precise classification.It explores a new approach to provide the quantitative determination with the information security level protection evaluation. 等级保护测评 云模型 数字特征 判定矩阵 判定云 classified protection evaluation cloud model digital features decision matrix decision cloud 10.14188/j.1671-8836.2014.05.009 TP309 贵州省科技厅工业攻关项目（黔科合GZ字〔2012〕3017） 2014-05-01 2021-04-01 5 60