融合云模型与贝叶斯反馈的主机安全评估方法

Host security evaluation method based on cloud model and Bayesian feedback

为减少主机安全评估中人为因素的影响,增强评估的可靠性,提出了基于贝叶斯反馈的云模型主机安全评估方法。将云模型与传统的层次分析法相结合,确定主机安全评估指标云模型权重,并通过贝叶斯反馈算法,对主机安全评估隶属云进行校验,给出了共识度较高的云标尺和定性评估云。选取常用的WEB服务器,对融合云模型与贝叶斯反馈的主机安全评估方法进行了评估实验。实验结果表明,该评估方法能更好地校验不同人员的评估结果,通过合理的判定分值形成定性与定量相结合的评估结论。

In order to reduce the influence of subjective factors in traditional host security evaluation and enhance the evaluation reliability,a cloud model host security evaluation method based on Bayesian feedback is proposed.The cloud model is combined with the traditional analytic hierarchy process to determine the weight of the host security evaluation index cloud model.At the same time,Bayesian feedback algorithm is used to verify and modify the subordinate cloud of host security evaluation,and the cloud scale and qualitative evaluation cloud with high consensus are given.The commonly used web servers are selected to evaluate this experimental method.The results show that this evaluation method can better verify the evaluation results of different personnel,and form a combined qualitative and quantitative evaluation conclusion through reasonable scores.