基于安全状态域的网络评价模型-软件学报.PDFVIP

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software , Vol.20, No.2, February 2009, pp.451−461 DOI: 10.3724/SP.J.1001.2009.03172 Tel/Fax: +86-10 © by Institute of Software , the Chinese Academy of Sciences . All rights reserved. ∗ 基于安全状态域的网络评估模型 1,2+ 1,2,3 1,2 1,2 张海霞 , 连一峰 , 苏璞睿 , 冯登国 1( 中国科学院 软件研究所 信息安全国家重点实验室,北京 100190) 2( 中国科学院 软件研究所,北京 100190) 3( 中国科学院 研究生院,北京 100049) Security-State-Region-Based Model of Network Security Evaluation ZHANG Hai-Xia1,2+, LIAN Yi-Feng1,2,3, SU Pu-Rui1,2, FENG Deng-Guo1,2 1(State Key Laboratory of Information Security, Institute of Software, The Chinese Academy of Sciences, Beijing 100190,China) 2(Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China) 3(Graduate University, The Chinese Academy of Sciences, Beijing 100049, China) + Corresponding author: E-mail: zhanghx@ Zhang HX, Lian YF, Su PR, Feng DG. Security-State-Region-Based model of network security evaluation. Journal of Software, 2009,20(2):451−461. /1000-9825/3172.htm Abstract : A security-state-region-based (SSR-based) model called security-state-region-based evaluation model (SSREM) is proposed, which integrates the assessment based on the attack graph and the evaluation according to criteria together. In the model, the attack result is divided into the change in the attack ability and environment. The cause and effect relationship among them lays a foundation for building mathematic equations. After that, the definition of SSR is proposed, and also curve and surface fitting recurring to Matlab is used to analyze