基于主机的安全评估系统的分析与设计-软件工程专业论文.docxVIP

家意见 ，采用三层树状层次结构，最底层由 36 个安全评估项组成 ，其分别隶属于 11 个不 同方面的安全评估要素，而这 11 个方面的 安全评估要素又隶属 于最顶层 的 主机安全。 (3) 综合利用层次分析法和模糊综合评价法的各自特点 ，实现了对主机安全 评估项的量化 ，不同安全评估要索及安全评估项对系统安全的影响权重值的计算 ， 以及主机整体安全水平的id化评估。 (4) 设计了主机安全评估系统的技术方案 ，介绍了主机安全评估系统的构成 及各个棋块的功能，并给出了系统的整体框架和 l详细工作流程。 本研究的主要创新点在于 : ( 1) 对主机安全评估的安全评估要索和安全评估项进行了适 当扩展，增加了 软件策略，安全策 略等安全管理 内容，更全面地考虑到影响主机安 全状况的各种因 素。 (2) 利用层次分析法获得安全指标 的相对权重后 ，引入棋糊综合评价法对安 全评估要素的盐 化分值逝行修正 ，保证了主机整体安全评估 id化结果的合理性。 关键词 : 主机安全评估:安全评估要 素: 安全评估项 :层次分析法: 模糊综合评价 Design and Research on Security Evaluation System ?ased 00 Host Computer Specialty: Technolo白/ of Computer Application Namc: Chcn Shuai Supervisor: Prof: Zhen g Qiusheng Abstract A s the greatest invention of the 20th Century，The Internet has gone deep into all respects of society and has brought hugely advantage to peoples work ，study and amll sement. BlIt as the development of variOllS hacker t巳chniqll es and malicious code， network security is presented with a fearful challenge. How to effectively safeguard the information secllrity has been an important resea rch contents in th e areas of computers . Security evaluation as an important step of active security defense，it is of significance to discovering in advance and handlin g on tim e the host compllters security risk. Security evaluation is also a study hotspot in the field of network security. By evaluation the security of host compllter，help u sers with discover the vu lnerab ility in th e host computer on time ，and help u ser understand current safety situation of host computer is the main purpose of this paper. This study，an evaluation system of host computer security risks is trying to collect an d analysis the infOllnation of vlllnerability and threat，th en evaluation the current safety situation of operating system by this information. The s巳curity factor of host computer includes 11 aspects: Operating System，Important Files，Browser，Web Service，Common Service，Process，Registration Table，Shared Folders，Application Program ，Dri