摘要
根据入侵容忍系统与一般网络系统相比所具有的特点,提出了一种专门针对入侵容忍系统的安全态势评估方法.基于入侵对系统所造成的影响以及入侵容忍的功能,构建了数据机密度、数据完整度、服务可用度3个评估指标,并根据各指标的特点给出了其量化方法,然后通过对这3个指标的定量计算来动态评估入侵容忍系统的安全态势.实验表明,所提方法是一种便于操作的态势评估方法,所得到的安全态势能反映出入侵容忍系统的真实安全状况.
According to the features of intrusion tolerant system compared to ordinary network system, an evaluating the security situation special for intrusion tolerant system is proposed. Three evaluation indexes are included： firstly, the confidentiality of data, the integrality of data and the usability of service are proposed based on the influence of intrusion and the function of intrusion tolerance. Secondly, the ways of quantifying the indexes are given according to the features of each index, and thirdly, the security situation of intrusion tolerant system is evaluated dynamically through computing the three evaluation indexes. Experiment shows that the method is easy to be operated, and reflects the actual security status of intrusion tolerant system.
出处
《北京邮电大学学报》
EI
CAS
CSCD
北大核心
2009年第2期57-61,共5页
Journal of Beijing University of Posts and Telecommunications
基金
国家自然科学基金项目(60374066)
关键词
入侵容忍
安全
态势评估
评估指标
网络安全
intrusion tolerance
security
situation evaluation
evaluation index
network security
