基于二维云模型的主机安全等级评估研究

RESEARCH ON 2-D CLOUD MODEL-BASED HOST SECURITY LEVELS ASSESSMENT

针对信息安全等级保护测评中主机安全等级判定的随机性和模糊性,提出基于二维云模型的主机安全等级评估的方法。首先根据主机安全测评中的两个模块测评结果的等级划分,构造主机安全等级评估规则;接着通过云发生器依据每条规则的两组数字特征构建基于二维云模型的主机安全等级评估云图,再根据评估云图投影出等级评估的投影面,实现主机安全等级评估的定量划分并克服评估结果的模糊性和随机性。通过实例验证,此方法简单有效可行,兼顾主机测评中的两个测评模块对主机安全的影响,能够定量地对主机安全等级进行精确的评估,具有一定的应用价值。

We proposed a 2-D cloud model-based host security levels assessment method to solve the problems of the randomness and fuzziness in host security levels determination when assessing the information security level protections. First, we constructed the rules for host security levels assessment according to the classification of two modules＇ evaluation results in host security assessment; then we constructed the 2-D cloud model-based cloud chart of the host security levels assessment according to two groups of digital features of each rule by cloud generator, after that, we projected the projection diagram of levels assessment according to the assessment cloud chart, and finally realised the quantitative determination in the host security levels assessment and overcome the randomness and fuzziness of the assessment results. It is verified by experiments that the method is simple, effective and feasible, considers the effects of both two assessment modules on host security in host evaluation, and could quantitatively and accurately evaluate the host security levels, and has a certain application value.