基于模糊层次分析的木马攻击效果评估技术研究

现有的网络攻击效果评估系统主要针对DDoS和蠕虫进行分析，缺乏对木马病毒的针对性。少数针对木马的危害度测量系统的指标值由人工标注，且都为定性值，稍欠客观性和全面性。基于该现状，从木马特性分析出发，建立针对木马病毒的层次化指标体系，设计指标值可定性也可定量，可人工标注也可系统采集。提出基于模糊层次分析的评估模型对木马攻击效果进行评估。同时，提出一种多对一的权重综合技术，对多组权重进行了合理的综合。最后，通过对比已有评估系统的评估结果，验证了所提评估技术的合理性。

Research on FAHP based Trojan attack effect evaluation

The particular characters of Trojan are not fully taken into consideration by existed network attack effect evaluation systems which mainly focus on DDoS and Warm.A few Trojan harm measurement systems is somewhat short for objectivity and completeness as the result of that its indicator values is confined to manually marked and qualitative values.Under the circumstances,the analysis of Trojan's features were started from,and a hierarchical index system which accepted both quantitative and qualitative values,and both manually marked and system col-lected values was built.Then,a FAHP based evaluation model was proposed to evaluate the Trojan attack effect.Meanwhile,a many-to-one method to ensemble multiple weight vectors was proposed.Finally,the rationality of proposed evaluation system was verified by comparison with others.