一种基于风险评估的信任模型

在分布式、动态网络环境中,实体之间的信任关系成为安全问题的重点。现有的信任模型研究大多是将风险评估看作信任的一种补充,甚至忽略了风险评估的影响,这将导致安全决策的片面性。针对这个问题,提出了一种基于风险评估的信任模型。该模型通过识别并量化系统的资产重要性、脆弱性严重性和威胁严重性,给出了基于风险评估的信任计算方法。

Trust model based on risk evaluation

In distributed and dynamic network environment,the trust relationship between entities be the key problem in security area.the existing trust models mostly regard risk evaluation as a supplement to trust,or neglect risk.this will result in that the security decision is unilateral.According to this problem,the author proposed a method for trust computation based on risk evaluation.the computation described risk quantification method by identifying and quantifying the significance of assets,criticality of threats and vulnerability of threats,and a trust computation method based on risk evaluation was designed.