摘要
在攻击树模型的基础上,对该模型进行扩展,提出了一种新的定量的风险评估方法。在对叶子节点(原子攻击)风险值的量化中,采用了多属性效用理论,使得评估更加客观;对该方法的每一步骤均给出了具体的算法,为实现自动化的评估工具建立了基础。
This paper extended the attack tree model, and proposed a new quantitative risk evaluation method. While the risk value of the leaf node （ atomic attack） was quantified, the multi-attribute utility theory was adopted, which could make the result more reasonable. Presented all algorithms for each steps of this new evaluation method that offered a good foundation for the implementation of the automatic evaluation tool.
出处
《计算机应用研究》
CSCD
北大核心
2007年第11期153-156,160,共5页
Application Research of Computers
基金
国家自然科学基金资助项目(60403027)
关键词
攻击树
攻击链
安全风险评估
attack trees
security assessment
risk evaluation
