基于未确知数学的网络安全风险评估模型

结合网络安全评价中存在诸多不确定因素的特点,提出一种基于未确知数学理论的网络安全综合评价新方法。分析了网络安全风险的因素,建立了网络安全风险评价因素的指标体系和评价等级空间。在分析网络安全风险因素的基础上,建立了网络安全风险评价因素的指标体系和评价等级空间,将未确知数学的方法运用于网络安全风险的综合评估中,在未确知测度理论的基础上,定义了未确知测度期望、未确知评价等级二值效应量值、综合评价的未确知测度向量、未确知等级二值效应期望和二值效应方差等新的未确知数学概念。在新的未确知概念的基础上,建立了网络安全风险综合评估的未确知数学模型。并用实例对该模型进行了应用,评价结果用一个未确知有理数来表示更符合实际。实例表明该方法计算简单科学有效,为网络安全综合评价提供了一种新途径。

A Network Security Risk Assessment Model Based on Unascertained Mathematics

In view of many uncertain factors existing in the characteristics of network security evaluation, a new network security comprehensive evaluation method is proposed based on the unascertained mathematics theory. Based on the analysis of network security risk, the index system and evaluation space of network security risk evaluation factors are established. The unascertained mathematical method is used in the network security risk comprehensive evaluation, and based on the theory of unascertained mathematics, the new unascertained mathematics concept of unascertained measurement expectation, comprehensive evaluation unascertained measure vector, the unascertained evaluation two value effect expectation and two value effect variance are defined. Based on the new unascertained concept, an unascertained mathematic model of network security risk comprehensive evaluation is established. The model is applied by real example, and the evaluation result is expressed by an unascertained rational number. The example shows that the method is simple and effective. This study provides a new way for the network security comprehensive evaluation.