网络安全多级模糊综合评价方法

Multilevel fuzzy comprehensive evaluation method of network security

计算机网络信息各种风险的定量评估方法研究是一项重要的基础性研究,是 IT 领域中的前沿课题之一。综述了计算机网络安全以及网络信息安全评估标准和评价现状,应用系统工程的理论和方法识别、分析和评价网络信息安全固有或潜在风险发生的可能性和危险因素,论述了网络综合安全风险的评价步骤与过程,建立基于硬件、软件及外部环境的计算机网络信息安全综合评价指标体系,给出了基于网络安全多级模糊综合评价模型及其评价方法。并结合网络实例给出了使用评价模型进行网络安全评价的步骤和方法,评价结果与实际相符。

The quantitative assessment method of different risks of network information is an important basic study in the information security. It is one of the front subjects in IT field. In this thesis, the assessment standard and current situation about the network security and network information safety are surveyed. The arricle Uses theory and method of system engineering discern , analyses and appraises the dangerous factor and possibility happening about network information safe inherent or potential risk.The evaluation step about network synthesis security risk has been described. synthesis evaluation index system can be established based on hardware and software and external environment condition. The synthesis evaluation model and method based on multilevel fuzzy comprehensive evaluation method of network security have been provided . combine the instance of the network and provide evaluating step and method based on the evaluating mode of network security .It is in conformity with reality to evaluatd result.