摘要
近年来,由于网络安全事件的频繁发生,人们对网络安全的重视度在不断提升。网络安全风险评估作为一种主动防御的安全技术,已经成为解决网络安全问题的最有效方法之一。本文对2008年至2018年间的网络安全风险的评估方法进行了系统的调查研究,提取总结出影响评估结果的因素,并据此对现有的方法进行分类、对比,全面掌握各个方法优势及其适用范围,给出客观准确的评估结果;并对其未来的发展方向进行提议,引导网络安全风险评估向着系统化、科学化、自动化、智能化的方向发展。
In recent years,because of the frequent occurrence of network security incidents,people are paying increasing attention to network security.As an active defense security technology,network security risk assessment has become one of the most effective methods to solve network security problems.In this paper,the evaluation methods of network security risk from 2008 to 2018 are systematically investigated,factors influencing the evaluation results are extracted and summarized,based on which the existing methods are classified and compared,the advantages and application scope of each method are comprehensively grasped,and the objective and accurate evaluation results are given;and the future development direction is summarized to guide the network security risk assessment is developing towards systematization,scientization,automation and intellectualization.
作者
张炳
任家东
王苧
ZHANG Bing;REN Jiadong;WANG Ning(School of Information Science and Engineering,Yanshan University,Qinhuangdao,Hebei 066004,China;The Key Laboratory of Software Engineering,Yanshan University,Qinhuangdao,Hebei 066004,China)
出处
《燕山大学学报》
CAS
北大核心
2020年第3期290-305,共16页
Journal of Yanshan University
基金
国家自然科学基金资助项目(61802332,61772449)
燕山大学博士基金资助项目(BL18012)。
关键词
风险评估
关联性
实时性分析
不确定性分析
定量分析
risk assessment
relevance
real-time analysis
subjective analysis
quantitative analysis