信息安全风险评估专家系统技术研究

为了提高国防信息安全保障能力,改变当前风险评估在单点评价上累加的局限,结合风险评估和人工智能技术的研究成果,提出了一种将专家系统技术用于风险综合测评的方法.通过引入基于规则的专家系统技术,将评价标准转化成规则固化在知识库中,在完成现场采集数据的事实化后,通过知识选取算法调用规则,完成推理计算.在资产风险评价的基础上,实现了对安全域中信息系统安全风险的综合评估,并通过实时监测和对比分析,适时启动推理机,完成了综合评估过程的自动化.

An Expert System for Risk Assessment of Information Security

In order to improve the safeguard capability of national defence information security,and to change the limitations of current risk assessment in a single point on the cumulative evaluation,this paper proposes a new method of applying expert system for integrated risk assessment through integrating the research results of artificial intelligence with that of risk assessment.By introducing the technology of rule-based expert system,criteria have been translated into rules in the knowledge base and data have ...