| 高安全属性价值设备威胁态势量化评估方法 |
| |
| 引用本文： | 韩磊,刘吉强,王健,石波,和旭东. 高安全属性价值设备威胁态势量化评估方法[J]. 网络与信息安全学报, 2020, 6(5): 54-66. DOI: 10.11959/j.issn.2096-109x.2020070 |
| |
| 作者姓名： | 韩磊 刘吉强 王健 石波 和旭东 |
| |
| 作者单位： | 1. 北京计算机技术及应用研究所，北京 100854;2. 信息保障技术重点实验室，北京 100072;3. 北京交通大学智能交通数据安全与隐私保护技术北京市重点实验室，北京 100044 |
| |
| 基金项目： | 国家自然科学基金(61672092);国防基础科研(JCKY2017204B063);中央高校基本科研业务费专项基金(2018JBZ103);山东省重大科技创新工程(2019JZZY020128);中国博士后科学基金(2018M633698) |
| |
| 摘 要： | 传统的网络安全态势量化评估方法主要面向宏观网络安全态势，未针对安全价值较高的网络设备，给出了高安全属性价值设备的定义，设计了针对设备的威胁态势量化评估框架和评估指标，根据评估框架和指标提出了高安全属性价值设备威胁态势量化评估方法。对具体网络中实际设备的评估结果表明，该方法能够准确、有效地量化评估高安全属性价值设备的威胁态势。
|
| 关 键 词： | 态势感知 安全威胁 量化评估 高安全属性价值设备 |
Quantitative threat situational assessment method for higher secure attribute value device |
| |
| Lei HAN,Jiqiang LIU,Jian WANG,Bo SHI,Xudong HE. Quantitative threat situational assessment method for higher secure attribute value device[J]. Chinese Journal of Network and Information Security, 2020, 6(5): 54-66. DOI: 10.11959/j.issn.2096-109x.2020070 |
| |
| Authors: | Lei HAN Jiqiang LIU Jian WANG Bo SHI Xudong HE |
| |
| Affiliation: | 1. Beijing Institute of Computer Technology and Applications,Beijing 100854,China;2. Science and Technology on Information Assurance Laboratory,Beijing 100072,China;3. Key Laboratory of Security and Privacy in Intelligent Transportation,Beijing Jiaotong University,Beijing 100044,China |
| |
| Abstract: | Traditional network security situational assessment is mainly for the macro network security situation， not for the specific equipment,especially for the key network device.A conception about the higher secure attribute value device was introduced,based on which a threat situational assessment research framework was presented and assessment indexes were discussed.A quantitative threat situational assessment method for higher secure attribute value device was proposed based on assessment research framework and assessment indexes.The experiment resultsshow that the proposed method can assess device threat situation accurately and effectively.Meanwhile,the method is more general and objective than traditional methods. |
| |
| Keywords: | situational awareness security threat quantitative evaluation higher security attribute value device |
|
| 点击此处可从《网络与信息安全学报》浏览原始摘要信息 |
|
点击此处可从《网络与信息安全学报》下载免费的PDF全文 |
