基于证据理论的安全策略有效性评估模型.pdfVIP

35 1 () http: / /www. kustjourna.l com/ V ol 35 N o1 20 10 2 Journal ofK unm ing U n iversity of Sc ience and T echnology ( Sc ience and T echnology) Feb 20 10 do:i 10 3969 / j issn 1007- 855x 2010 01 017 秦 智, 张仕斌 ( , 610225) : 论文引入了证据理论, 来解决评估中不确定性或不知道的信息 在研究与分析过 中, 将 安全策略分成安全管理抵御威胁漏洞修复 3大指标, 并将指标及其子指标构建成安全策略评 估指标树, 通过分层评估, 逐步向上层对积累的证据进行合成, 使得错误假设的可信度逐渐逼近 于 0% , 而正确假设的可信度逐渐逼近于 100% 最后通过实例分析验证了评估的合理性 : 证据理论; 安全策略; 层次分析法; 信任测度 : TP393 08 : A : 1007 - 855X ( 2010) 01- 0083- 05 EvaluationModel of Validity of Security Strategy ased on Evidence Theory Q IN Z h,i ZHA NG Sh ib in ( D epar tm ent of N etw ork Eng ineer ing, Chengdu U niversity of Inform ation T echno logy, Chengdu 6 10225, China) Abstract: The ev idence theo ry is introdu ced in th is paper to so lve the uncertainty or unknow n inform ation in the eva lu ation During the process of research and analysis, secur ity strategy is divided into three indexes: security m anagem ent, resisting threat and repa iring vu lnerab ility T he eva lu ation index tree o f the secur ity strategy w ith index and subindex is then con stru cted to synthesize the accum u lated evidence by stratif ication evaluat ion The re liability of the erroneou s assumpt ion g radu ally approaches to 0 % and the reliab ility o f the right assumpt ion gradu ally is close to 100% T he rat iona lity o f evaluat ion is fina lly va lidated by an exam p le Key words: ev idence theory; security strategy; analytic h ierarchy process; be lie f m easure 0 , , , . , , , [ 1] [ 2~ 5] , . , , . , , . , , , , , , , , , . , , , , . , , , , , 100% , 50% , . : 2009 - 02 - 23 :