基于贝叶斯攻击图的电子政务系统风险评估方法研究

Research on Risk Assessment Method of E-government System Based on Bayesian Attack Diagram

为了提升电子政务系统风险评估的效果,从资产、威胁、脆弱性三个方面入手,将攻击图理论和贝叶斯理论相结合,提出一种适用于电子政务系统的动态风险评估模型。运用文章所提方法分析系统整体安全态势,最终找到攻击者最有可能的攻击路径,增强电子政务系统面对网络攻击动态防御的能力。

In order to improve the effect of e-government system risk assessment,this paper combines attack graph theory with Bayesian theory from three aspects of assts,threats and vulnerability,and proposes a dynamic risk assessment model for e-government system.With the method proposed in this paper,the overall security situation of the system is analyzed,and the most possible attack path is found,which can effectively enhance the dynamic defense capability of e-government system in the face of network attacks.