摘要
网络安全评估的难点在于如何选择和分析各种影响网络安全的因素及其属性。文章提出一种新的思路和评估方法,即从影响计算机安全的众多复杂因素中选取起关键作用的用户访问权限作为评估因素,通过对影响用户访问权限的漏洞进行定性、定量的分析,得出节点失去控制权限的途径总数和风险系数,评估网络节点的安全状况。
The difficulty of network security evaluation is how to select and analyze the factors and their attributes,which are highly important to network security.In this paper,access control private is selected as evaluated attribute.It proposes a new method which adopts matrix to analyze the attributes of vulnerabilities to evaluate qualitatively and quantitatively the security status of network node.The total paths and risk index of the node losing its power control are obtained by this method.
出处
《计算机工程与应用》
CSCD
北大核心
2004年第23期155-157,229,共4页
Computer Engineering and Applications