网络安全威胁态势评级的变权方法

Variable Weight Method of Rating for Network Security Threat Situation

在解决网络安全威胁评级问题,传统的方法把网络安全威胁评级和排序评估当成同一个问题,以及存在评价值可转移的情况.为此,从网络安全威胁形成的机理,描述网络安全威胁态势评级问题.首先,构建网络安全威胁态势评级指标隶属函数,提出了基于交叉熵和熵理论的指标权重确定方法,然后,提出分段变权的模糊综合评价模型,进一步运用二元语义方法确定网络安全威胁态势等级.最后,以新生态零售企业网络安全威胁评级为例,应用分段变权方法对网络安全威胁态势进行评级,与传统方法下的评级结果对比,说明文章的方法是合理和可行的,而且更好反映了网络安全威胁态势的特征,为进行网络安全威胁态势评级提供了一条新途径.

During the rating of network security situation problems,the traditional methods treat the network security threat rating and ranking assessment as the same problem and the assessed values are transferable.In order to solve the problem,the forming mechanism and rating of the network security threat problem is introduced.The membership functions of the indexes of network security rating are structured and the indexes weights are determined using cross entropy and entropy.Then,the fuzzy comprehensive evaluation model based on variable weight is proposed,further,the grade assessment of network security threat situation are computed using two-tuple semantic method.Finally,the new ecological retail enterprises of network security threat rating are taken as an example and the analysis results also given.It was illustrated with a real example that the fuzzy comprehensive model and method of the grade assessment of network security situation are more operational,intuitionistic and easily explained,which better reflects the character of network security situation and provides a new way for network security situation rating.