摘要
针对信息系统进行等级保护测评后得到的安全结论描述的模糊性,提出了一种基于云模型的智能且定量的判定方法.首先依据专家经验得到测评中对网络安全、主机安全、应用安全、数据安全、物理安全和安全管理这6大测评模块的测评结果的统一描述,进而得到相应模块的隶属云,再通过各模块隶属云的三个期望构建判定矩阵,最后得到测评结论的判定云图,实现了对测评结论的定量判定.通过实例验证表明:Y该判定方法可以有效地对测评结论进行定量度量,并给出精确的判定划分.
The description of safety conclusion is fuzziness after doing the classified protection evaluation of information system. In order to solve this problem, we put forward an intelligence determining and quantitative calculating method based on cloud model. Firstly, accoming to experts' experience, we unified the description of evaluation resuits containing network security module, host security module, application security module, data security module, physical security module and security management module to get the corresponding module of membership cloud. Secondly, we built the decision matrix by three expectations of each model's membership cloud and in the last, we get the decision cloud chart which owns to the evaluation conclusion and realizes the quantitative determination. Experiments show our method is effective to get the quantatative evaluation conclusion and the precise classification. It explores a new approach to provide the quantitative determination with the information security level protection evaluation.
出处
《武汉大学学报(理学版)》
CAS
CSCD
北大核心
2014年第5期429-433,共5页
Journal of Wuhan University:Natural Science Edition
基金
贵州省科技厅工业攻关项目(黔科合GZ字〔2012〕3017)
关键词
等级保护测评
云模型
数字特征
判定矩阵
判定云
classified protection evaluaticn
cloud model
digital features
decision matrix
decision cloud