一种基于图重写的计算机安全风险分析系统

基于项重写的安全风险分析的抽象规约模型在代数签名的基础上直接得到结果，没有提供相关攻击步骤明确描述，没有提供决策和攻击之间关系的统一视图，容易导致威胁的传播。为此，本文首先将图重写方案引入模型中，证明了引入图重写规则以后的风险分析系统仍然是终止的。然后利用图重写规则，提出了一种可以获得更优决策集合的方法，在改进的求带权二分图最小覆盖的方法的基础上，获得了一种具有相同时间复杂度和更高代价利益比的方法。整个模型高效、易于管理。

A Computer Security Risk Analysis Model Based on Graph Rewriting System

The computer security risk analysis model bases on term rewriting comes out with the result immediately form algebra signature, ignoring the reduction procedure of related attack, providing no unified view of decisions and attacks, making it easy to propagation threat. This paper introduces graph rewriting into this model, and proves the new risk analysis system to be terminating. Also a new decision selection method is put forward with the help of the graph rewriting rule. Basing on the algorithm of the weighted vertex cover algorithm, this paper presents a new method of decision selection with the same time complexity and more benefit.