基于灰色层次模型的计算机网络安全评估

针对计算机网络安全评估中主观因素多、指标难以量化、评估方法繁杂的问题,建立了一种基于灰色层次分析法(A HP)的网络安全评估模型.首先,根据综合评价指标体系构建原则,结合目标网络实际情况,建立由目标层、指标层、子指标层构成的层次化网络安全评估指标体系;其次,为减小主观因素的影响,采用层次分析法和德尔菲法构造判断矩阵,结合加权平均和方根法确定指标权重系数;然后,根据灰色系统理论,对目标网络进行综合评估,得到最终的综合评估值;最后,通过对某电子实验室专用网络进行仿真分析,计算得到定量的评估值.评估结果能反映评估对象的真实情况,对网络的下一步建设有指导作用.

Computer Network Security Assessment Based on Grey Hierarchy Model

In the field of computer network security evaluation,in order to solve the problems that subjective factors are over-many,indexes are difficult to quantify and evaluation methods are miscellaneous,a network security assessment model based on grey analytic hierarchy process(AHP) is established.Firstly,on the basis of construction principle of comprehensive assessment index system,a hierarchical network security assessment index system is set up,which is composed of the target layer,the index layer and the sub-index layer.Secondly,in order to reduce the influence of subjective factors,AHP and Dephi methods are used to structure judgment matrix.Then weighted average and square root methods are combined to determine the index weight.Thirdly,based on the grey system theory,the target network is comprehensively evaluated to get the final assessment value.Finally,a quantitative assessment value is gained through the simulation analysis of an electronic laboratory appropriative network system.The evaluation result can reflect the real situation of the evaluation object,and has guiding function to the further development of the network.