基于D-S证据理论的信息安全风险评估

采用Dempster-Shafer(D-S)证据理论处理信息安全风险评估中的不确定性问题,提出了基于D-S证据理论的风险评估模型。用改进的Dempster合成法则即对基本可信度分配使用"折扣率"的方法,对信息系统中存在的各种风险因素进行合成,处理风险因素中的不确定性,并通过仿真证明了该算法的正确性。最后,通过与模糊综合评判法进行比较验证了证据理论具有更高的准确性。

Information security risk evaluation based on D-S evidence theory

Dempster-Shafer(D-S) evidence theory was applied to treat the uncertainty of the information security risk evaluation.A risk evaluation model based on D-S evidence theory was proposed.The improved Demspter's rule of combination of evidence was used to combine the risk factors of information system.It reduced the uncertainty of risk factors.The improved Demspter's rule of combination of evidence,i.e.discount ratio,is used in basic belief assignment to combine kinds of risk factors.By simulation analysis,the correctness of the algorithm was proved.Finally,it was verified that evidence theory had higher accuracy than fuzzy comprehensive evaluation method.