一种主机安全评估系统的研究和设计

Research and Design on Host Security Assessment System

为解决现有主机安全评估系统扫描项不全、知识库不完备、评估结果太笼统等问题,将定性和定量分析用于评估中,提出了一种主机安全评估模型MSA,该模型集成多元安全扫描、综合安全评估知识库、多元数据融合和层次分析结合的评估方法等关键技术,与现有系统比较,该模型扫描项全,知识库完备,评估结果合理.

To solve the problem of incompleteness of scan item and not-integrity of host security assessment database and shortage of quantitative security assessment method,this paper brings forward three key technologies which consist of host security multi-scan,synthesize assessment database and assessment model with multi-data fusion technique and AHP（MDFAH）.System realizes validate source data completeness of multi-scan and veracity of assessment.