针对具体主机的网络攻击危害度评估模型

网络攻击的危害度是指网络攻击对整个应用系统造成危害的程度。对于危害度的划分目前国际上没有一定的标准，一般只是采用定性的方法。介绍了一种对网络攻击危害度的定量定义，提出了一种针对具体主机的新的危害度评估模型。在新模型中，首次考虑到了具体的目标操作系统和服务类型对攻击危害度的影响，同时在新模型的基础上分析了模型中各因子的取值原则。

Model of evaluating severity of network attack on concrete computer

The severity of the network attack mean the degree of danger suffered by whole system from network attack. There is no certain standard in the world to the division which endangers degree at present, generally just adopts the qualitative method. A kind of quantitative definition of the severity of network attack was introduced, and a new model of evaluating the severity of the network attack on concrete computer was put forward. In the new model, the influence of the concrete goal operating system and service type to the severity of the network attack was considered for the first time. Meanwhile, the fetching value principle of every factor in models was analyzed on the basis of new model.