网络安全风险评估模型研究综述

Overview of Network Security Risk Assessment Model

安全风险评估是了解网络安全性和脆弱性的基础,评估结果有助于选择恰当的防御策略。网络安全评估方法有很多,该综述总结了领域内学者的研究情况,并将其划分为四类分别阐述。其中基于模型的方法研究最为广泛,以通用模型为基础,对网络进行抽象、建模和量化,评估结果可信度较高。重点介绍了定性评估模型和定量评估模型两类,各选取了3个代表模型,详细介绍模型的概念、构造、使用,以及不同学者对模型的改造和创新,对比了模型间的优势及不足。最后对新兴的评估方法进行了说明,展望了网络安全风险评估的发展方向。

ed,modeled,and quantified,and the evaluation results are highly credible.This review focuses on both qualitative evaluation model and quantitative evaluation model,selects three representative models for each and details the concept,construction,use,as well as the transformation and innovation of the models.Finally,it explains the emerging assessment methods and looks forward to the the development direction of network security risk assessment.