两种网络安全管理系统的生存性定量分析方法

虽然通信网络生存性分析技术已经发展多年,但对大量的通信网络之上的各种分布式应用系统,如网络安全管理系统(NSMS)的生存性评估技术尚无有效的方法。本文提出两种评估NSMS生存性的方法。第一种方法建立基于数据流的图模型,通过图的连通性计算生存性。第二种方法建立基于数据流的过程模型,通过Monte Carlo实验数据的统计估算生存性。我们的经验表明:随着网格技术的发展,第二种方法用于复杂系统的生存性定量分析是可行的。

Two survivability quantitative analysis methods for network security management systems

Although telecommunication network survivability analysis techniques have developed for years, the effective techniques to quantitatively evaluate survivability of various distributed application systems, like network security management systems(NSMS), which are built over telecommunication networks are urgently demanded. In this paper, two methods for performing NSMS survivability analysis are presented. In the first method, a graph-based model is built through analyzing system dataflow, and the survivability is computed with the graph connectivity. In the second, a process-based model is built through analyzing system dataflow, and the survivability is assessed by statistics of the Monte Carlo experiment data. Our experiences show that the second method is practical for survivability quantitative analysis of complex systems with the development of grids technology.