|
|||||
|
|
| 基于全局权限图的网络风险评估模型 | |
| 引用本文： | 张保稳,罗铮,薛质,银鹰. 基于全局权限图的网络风险评估模型[J]. 上海交通大学学报, 2010, 44(9): 1197-1200 |
| 作者姓名： | 张保稳 罗铮 薛质 银鹰 |
| 作者单位： | （1.上海交通大学 信息安全工程学院, 上海 200240; 2.公安部第三研究所, 上海 201204） |
| 摘 要： | 提出一种全局网络权限图的概念和生成方法,基于网络权限图建立了一种新的网络风险评估模型,结合虚构的网络环境,对上述生成算法和网络评估模型加以验证.结果表明:与常规评估方法相比,由于引入了漏洞的量化数据等网络安全配置信息,该方法的评估结果更为精确. |
| 关 键 词： | 网络安全 风险评估 |
| 收稿时间： | 2009-11-02 |
A Network Risk Assessment Model Based on Network Global Privilege Graph |
|
| ZHANG Bao wen,LUO Zheng,XUE Zhi,YIN Ying . A Network Risk Assessment Model Based on Network Global Privilege Graph[J]. Journal of Shanghai Jiaotong University, 2010, 44(9): 1197-1200 |
|
| Authors: | ZHANG Bao wen LUO Zheng XUE Zhi YIN Ying |
| Affiliation: | （1. School of Information Security, Shanghai Jiaotong University, Shanghai 200240, China; 2. Third Institute of the Ministry of Public Security of China, Shanghai 201204, China） |
| Abstract: | A concept of global network privilege graph and its generation method were proposed. Then a novel network risk assessment model based on privilege graph was proposed. The algorithm and model were verified using a demonstrative network. The results show that the assessment achieved by the model is more exact than common methods because the model considers the quantitative data of vulnerabilities and other security configuration information. |
| Keywords: | |
| 本文献已被 CNKI 等数据库收录！ | |
| 点击此处可从《上海交通大学学报》浏览原始摘要信息 | |
| 点击此处可从《上海交通大学学报》下载全文 | |