Risk Assessment of Information System using the Shell Theory and Attack Graph

摘要：

In order to improve the accuracy of risk assessment of corporate networks, the paper introduces the concept of network shell into the field of security risk assessment. After analyzing the actual needs of corporate networks, we give the risk assessment model of network shell, then based on this model we analyze the application of network shell and give the algorithm to repair the network shell through the attack graph. After that, a calculation method of the integrated value of network shell is given. Finally, an example is given to verify the validity of assessment model.

关键词： vulnerability network shell attack graph risk assessment

作者: Xiaorong Cheng Zhenshan Zhang

作者单位: School of Computer Science and Technology North China Electric Power University Baoding,China

会议类型: 国际会议

会议名称: 2010 3rd IEEE International Conference on Computer Science and Information Technology(第三届IEEE计算机科学与信息技术国际会议 ICCSIT 2010)

会议地点: 成都

会议语种:英文

页码: 537-541

在线出版日期: 2010-07-07（万方平台首次上网日期，不代表论文的发表时间）