脆弱性特征要素递次演化分析与评价方法研究

The Mechanism and Evaluation of Vulnerability Factors' Progressive Growth

脆弱性描述的是承载体应对风险的固有水平。从脆弱性角度讨论安全问题,可以找到对系统可能产生危害的范围、可抵抗程度以及系统对威胁的适应程度,帮助安全管理者了解系统运营中的脆弱环节或者脆弱点。研究发现:脆弱性的特征要素(暴露度、敏感度、适应度)间不是完全独立的,存在着递次呈现关系,可以此为脉络建立一个脆弱性研究的理论体系,从而确定脆弱性管控的两条原则:进行有针对性的管理,逐个击破;实行分层递进式管理,从源头抓起。脆弱性管控原则可为科学确定管理环节的先后顺序,有针对性地提出安全管理措施,合理选择管理方案提供理论基础。

Vulnerability describes the carriers＂ inherent capability of responding to risks. A discussion on security issues from the perspective of vulnerability helps find the impact area of the possible harm to and the resistibility of the system, and the system＇s adaptability to the threat, which could help security managers to locate the vulnerable links or parts.The result of the research Shows that the three characteristic factors （i.e. exposure, sensitivity and fitness） of vulnerability are not completely inde- pendent. On the contrary, there is a progressive growth relationship between them. This study uses the progressive context to establish a theoretical framework for vulnerability research. Based on this, this paper determines the two principles of vulnerability management. The first is the targeted management, which solves security problems one by one. The second is the hierarchical progressive management, which starts with the source. It is believed that the vulnerability management is conducive to determine the scientific management processes and targeted security management measures, and that it provides a theoretical basis for choosing reasonable management programs.