信息安全测度构成分析与研究

Research on Metrics Construct in Information Security Measurement

信息安全测度的构成问题是信息安全度量的关键问题之一,是整个度量过程的"详细设计"。文章总结了安全测度构成的内涵,指出测度构成包括度量声明和度量方式2方面内容;阐述了安全测度构成的基本原理,指出度量信息模型可作为安全测度构成的逻辑模型;分析总结了安全测度的选取原则和选取过程,对目前几种典型安全度量方法中的测度构成方法进行了分析和比较。

Information security metrics construct is one of the key points in information security measurement. It＇s the ＂detailed design＂ of the whole process of measurement. Conception and rationale of security measurement are discussed Process of metrics development and criteria of metrics selection are summarized. Metrics construct methods in several typical security measurement techniques are analyzed.