网络终端安全状况评估指标体系的研究

为了准确和全面地评估网络终端安全状况,完善网络信息安全保障体系,提出了一套评估网络终端安全状况的指标体系.该指标体系包含了网络终端资产、威胁和脆弱性的各个方面,减少了人为的主观因素影响.基于信息安全风险评估方法,建立了网络终端安全状况评估模型,利用层次模糊综合评价法及定性分析与定量计算相结合的评估技术对网络终端安全状况进行评估,并结合实例证明了该指标体系的合理性和可行性.

Research on network terminal security assessment index system

To assess network terminal security accurately and improve network information security insurance system,a set of index system to assess network terminal security is proposed. This index system contained all of aspects of network terminal assets,threats and vulnerability,and decreased subjective effects of man-made. Based on the technique of risk assessment for information security,the assessment model of network terminal security is constructed. By multilevel fuzzy comprehensive judgment and evaluation tec...