基于危险理论的网络安全风险评估

Evaluation Model for Network Security Risk Based on Danger Theory

网络风险评估可以为采取积极主动的防御手段提供依据。为了提高网络安全风险评估的可信性,借鉴免疫系统与网络安全防范的相似性,基于危险理论,利用云模型对引起系统危险的性能参数进行表示,提出了一种新的网络安全风险评估方法。给出了算法设计思想和具体实现过程。在危险感知器的构造过程中,采用了一种无需确定度的逆向云生成算法。实验结果表明,本算法由于危险信号的引入,排除了一些对网络无危险的攻击,更能正确评估网络的安全风险,并且有效保留了风险评估过程中的不确定性,评估结果更加科学。

The evaluation of network risk provides a reliable basis for active network defense. In order to improve the trusty of network risk, a danger-theory based evaluation model for network risk was proposed, and cloud model was used to represent danger signal. The design ideas and implementation steps were given. An improved backward cloud algorithm with unknown certainty was used to generate danger perception. The experimental results prove that some attacks were eliminated because of the danger signal, so the proposed meth- od can evaluate the network risk correctly and retain the maximum uncertainty of network assessment more reasonable.