基于云模型的信息系统测评安全结论判定

Determination of Safety Conclusion in Evaluating Information System Based on Cloud Model

针对信息系统进行等级保护测评后得到的安全结论描述的模糊性,提出了一种基于云模型的智能且定量的判定方法.首先依据专家经验得到测评中对网络安全、主机安全、应用安全、数据安全、物理安全和安全管理这6大测评模块的测评结果的统一描述,进而得到相应模块的隶属云,再通过各模块隶属云的三个期望构建判定矩阵,最后得到测评结论的判定云图,实现了对测评结论的定量判定.通过实例验证表明:Y该判定方法可以有效地对测评结论进行定量度量,并给出精确的判定划分.

The description of safety conclusion is fuzziness after doing the classified protection evaluation of information system. In order to solve this problem, we put forward an intelligence determining and quantitative calculating method based on cloud model. Firstly, accoming to experts＇ experience, we unified the description of evaluation resuits containing network security module, host security module, application security module, data security module, physical security module and security management module to get the corresponding module of membership cloud. Secondly, we built the decision matrix by three expectations of each model＇s membership cloud and in the last, we get the decision cloud chart which owns to the evaluation conclusion and realizes the quantitative determination. Experiments show our method is effective to get the quantatative evaluation conclusion and the precise classification. It explores a new approach to provide the quantitative determination with the information security level protection evaluation.