A Novel Security Risk Assessment Model for Information System

摘要：

Security defense against threats is very important to information system. A novel security risk assessment model is presented. In this model, an information system consists of a series of network nodes, which have three elements: assets, rights and vulnerabilities. To analyze the relevance between vulnerabilities, an algorithm for intrusion path discovery is proposed centralized on assets. By investigating the intrusion paths found, the system risk is quantitatively evaluated on vulnerabilities, nodes, assets, or system, which indicates the risk situation of the system. A simulation experiment and results verify availability and effectiveness of the model.

关键词： information security model risk assessment vulnerability

作者: Huiying Lv

作者单位: School of Information Engineering Capital Normal University Beijing 100037 China

会议类型: 国际会议

会议名称: The 2nd IEEE International Conference on Advanced Computer Control(第二届先进计算机控制国际会议 ICACC 2010)

会议地点: 沈阳

会议语种:英文

页码: 282-287

在线出版日期: 2010-03-27（万方平台首次上网日期，不代表论文的发表时间）