摘要
对信息单向传输过程中网络安全趋势感知,能够有效提高网络信息传输安全性。对网络安全趋势的感知,需要对信息漏洞进行量化评估,计算信息节点攻击序列发生的概率,完成网络安全趋势的准确感知。传统方法将信息趋势描述与安全规则进行模式匹配,并向用户提交漏洞报告,但忽略了对节点攻击序列概率的获取,导致感知结果不准确。提出基于概率风险评估的网络信息单向传输安全趋势感知方法。计算网络信息单向传输过程叶节点、根节点以及各个攻击序列发生的概率,对网络信息单向传输过程安全漏洞风险进行分析,依据网络信息单向传输过程安全威胁、漏洞、资产都会增加风险值的原则,获得信息安全漏洞风险值,实现信息安全漏洞的实时量化评估,完成网络安全趋势的感知。实验结果表明,所提方法能够实时反映漏洞攻击行为阶段性变化,具有更高的安全趋势感知准确性。
To perceive the trend of network security needs to quantify and evaluate the information vulnerability, then calculate the probability of occurrence of information node attack sequence. Traditionally, the probability of node attack sequence is ignored. Therefore, the perception result is not accurate. In this article, we focus on a method for perceiving the security trend of one - way transmission of network information based on probabilistic risk assessment. The occurrence probability of leaf nodes, root nodes and attack sequences in the process of network information one - way transmission were calculated and security vulnerability in the process of one - way transmission of network information was analyzed. According to the principle that security threat, vulnerability and asset might increase risk value in the process of one - way transmission of network information, the risk value of information security vulnerability was obtained. Meanwhile, the real - time quantitative evaluation of information security vulnerability was achieved. Thus, the perception of network security trend was completed. Simulation results prove that the proposed method can reflect the periodical variation of vulnerability attack behavior in real time, which has higher accuracy of security trend perception.
作者
赵飞
ZHAO Fei(Beijing Union University, Beijing 100101 ,China)
出处
《计算机仿真》
北大核心
2018年第6期456-460,共5页
Computer Simulation
关键词
信息单向传输
安全漏洞
趋势感知
One way transmission of information
Security vulnerabilities
Trend perception
作者简介
赵飞（1962-），男（汉族），北京人，硕士研究生，高级实验师，主要研究领域为信息工程。
