基于信息度量和损耗的网络安全系统综合效能分析研究

Research on Comprehensive Effectiveness Analysis of Network Security System Based on Information Metrics and Loss

在信息化进程中,网络安全的重要意义和关键作用与日俱增。为了应对日益严峻的网络安全威胁,大量的网络安全系统被部署在网络中以保障应用系统不受攻击,如何评估网络安全系统在实际应用场景中的效果成为必须面对的问题。利用对网络安全系统的效能分析,可以为网络安全方案的设计和网络安全系统的选择提供必要的量化参考。但是,目前一般意义上的网络安全效能分析往往只关注防护效果,而忽视了网络安全系统部署后对被防护系统服务能力的负面影响。文章构建了一种以信息度量为基础的网络安全综合效能分析方法,将网络安全系统的防护效果和对被防护系统服务能力的负面影响同时纳入评估框架,为网络安全系统的效能分析研究提供了新的思路。

In the process of informationization,network security is more important and pivotal.In order to deal with the increasingly serious security risk,a large number of security systems are deployed in the network to protect the application system.How to evaluate the effect of security systems in actual environment has been a problem to be faced.The effectiveness analyses of security system provide necessary quantitative indicators for security scheme design and systems selection.However,the current analyses in a general sense just focus on the protection effect that ignores the security system’s negative effect on the protected system.This paper constructs a comprehensive effectiveness analysis method of security system based on information metrics and loss.The method considers the protection effect and negative effect and provides a new idea for the research on effectiveness analysis on security systems.