摘要
为了评估网络信息系统的安全风险,提出了基于智能规划的信息安全风险过程建模方法:使用规划领域的定义语言描述信息安全的风险领域和风险问题,修改后的bifrost规划引擎调用相关算法构建系统所有的渗透路径,最后通过Graphviz Toolkit接口绘制出规划渗透图表现系统安全风险过程.
To evaluate the information security risk,a planning-based information security risk process modeling approach(PISRPMA)was proposed to model the risk process of Information Security.PISRPMA described risk domain and risk problem in planning domain definition language,a modified bifrost engineer reasoned all exploit paths using correlative algorithms and Graphviz Toolkit built a planning exploit graph to model the risk process.
出处
《电子学报》
EI
CAS
CSCD
北大核心
2008年第B12期76-80,70,共6页
Acta Electronica Sinica
关键词
智能规划
风险过程
规划领域定义语言
planning
risk process
planning domain definition language