一种基于实体行为风险评估的信任计算方法

在分布、动态环境中，风险和信任是影响安全决策的关键因素。基于安全风险评估原理，提出一种基于实体行为风险评估的信任计算方法。该方法通过识别并量化信息资产的重要性和实体行为威胁的严重性，给出了实体行为风险量化和实体信任度的计算方法。应用实例及计算结果表明,该方法能够正确地识别实体的风险变化，并能通过信任度计算为系统正确地控制实体的后续行为提供客观支持。

Method for trust computation based on behavior risk evaluation

Risk and trust are key factors impacting on the security decision-making in the distributed and dynamic environments. According to information risk evaluation theory, the author proposed a method for trust computation based on behavior risk evaluation. The proposed method described risk quantification method by identifying and quantifying the significance of assets and the criticality of threats from the behaviors of entities, and designed trust computation methods based on the quantified risk. Experimental results show that the proposed method can correctly identify the changing risk implied in the behaviors of entities, and compute trust based on the changing risk. It can provide objective reference for the system to correctly control the follow-up behaviors of entities.