基于AHP—TOPSIS的渗透测试工具的综合评价模型

Comprehensive Evaluation Model of Penetration Tools Based on AHP-TOPSIS

综合TOPSIS和AHP方法,针对网络安全工具难以精确抉择的问题,提出一种简单、易实现且灵活性较强的综合评价模型。首先是从各个工具的功能、使用平台、使用人员期望以及用户评分等4个评判指标进行展开分析,建立出综合评价模型的指标体系;其次,利用AHP法和Matlab软件确定各指标相应的客观权重并进行综合分析并建立判断矩阵;再次,使用TOPSIS法分析计算最优解的逼近度,同时确定最符合用户需求的工具。最后,结合指标体系和需求选取部分工具进行实验验证。证明了此模型的可行性和灵活性,同时结果表明,该模型对于网络研究人员在抉择工具时有一定的参考价值。同时该模型也可适用于其他工具的选择。

Combined with the TOPSIS and AHP methods,a comprehensive evaluation model that is simple,easy to imple⁃ment and flexible is proposed for the problem that network security tools are difficult to accurately choose.The first is to analyze the four evaluation indicators of each tool's function,usage platform,user expectation and user rating,and establish an index system of comprehensive evaluation model.Secondly,the weight of each index is determined by AHP and Matlab software,and the judgment matrix is established.Thirdly,the approximation degree of the optimal solution is analyzed and calculated by TOPSIS method,and the tool that best accords with the user's needs is determined at the same time.Finally,combined with the indicator system and the demand selection part of the tool for experimental verification.The feasibility and flexibility of this model are proved.The results show that the model has certain reference value for network researchers in choosing tools.At the same time,the model can also be applied to the selection of other tools.