基于二维云模型的数据库安全等级评估研究

Research on Database Security Levels Assessment Based on 2-D Cloud Model

针对信息安全等级保护测评中数据库安全等级判定存在模糊性和不完整性,提出了关于二维云模型的数据库安全等级评估方法。通过对数据库和数据自身的测评结果等级进行划分,构造数据库安全等级评估规则;通过云发生器依据每条规则的两组数字特征构建二维云模型的数据库安全等级评估云图,再根据评估云图投影出等级评估的投影面,实现数据库安全等级评估的定量划分。通过实例验证,上述方法简单有效可行,具有一定的应用价值。

The determination of database security levels conclusion is of fuzziness and incompleteness ＇after doing the classified protection of information system. In order to solve this problem, an intelligence determining and quanti- tative calculating method was proposed based on 2 - D cloud model. Firstly, the rules were built for database security levels assessment according to the evaluation＇s result division between database and data itself; secondly, according to two groups of digital features in the cloud generator, the assessment cloud chart of the database security levels was constructed based on the 2 - D cloud model; then, the projection diagram of levels evaluation was projected refering to the assessment cloud chart; finally, the quantitative determination was realized in the database security levels as- sessment. Experiments show that the method is simple and effective, and has a certain application value.