基于知识库的PKI等级评估模型的研究

THE INVESTIGATION FOR THE PKI SECURITY LEVEL ASSESSMENT MODEL BASED ON KNOWLEDGE BASE

提出了一种基于知识库的PKI等级评估模型。目前国内外对于PKI等级评估的研究大多集中于定性评估,并且依赖于评估者的专业水平。为了能够使PKI的等级评估方便而精确,借鉴了一种著名的风险评估工具的思想,即基于专家系统知识库的评估体系。在此基础上,结合PKI等级评估的自身特性,提出一套由评估依据产生的规则库,并在规则库之上给出了以事实表、前件表、后件表三表组成的知识库模型和由表中相关键值驱动的推理演绎算法,从而得出一个自成体系的PKI等级评估工具的模型。

A model for PKI security level assessment based on knowledge base is proposed. Currently, the investigations for this subject are concentrated at qualitative assessment, and depend on the knowledge of the evaluator. To make the assessment more convenient and more accu- rate,the idea of a famous risk assessment tool is used for reference, which is the assessment system based on expert system and knowledge base. Upon this foundation, an entire series of the rule-base which is derived from the assessment regulation is proposed, integrated with the PKI＇s feature. Three tables are designed for the rule-base, which are fact table, rule table and goal table. And the deductive reasoning of the knowledge base are driven by the relevant key values in the three tables.