基于主机安全层的安全评估系统的设计与研究

发布时间：2018-07-12 15:59

本文选题：主机安全层评估要素 + 安全评估要素结构模型　；参考：《贵州师范大学》2014年硕士论文

【摘要】：在日常生活中，网络技术的应用已渗透到各方面，信息泄漏事件频繁发生，给人们的人身和财产安全带来了巨大的危害。因此对信息的保护已成为各行各业亟待解决的问题。而安全风险评估作为信息安全保护中的一个重要环节，，对行业用户了解信息系统的安全状况具有重要意义。但是因为安全风险评估的流程复杂、周期长等问题，严重阻碍着行业安全风险评估工作的进程。因此，有针对性的开发自动化、模块化的安全风险评估系统是未来风险评估服务的研究热点。论文以Windows Server2003系统平台下主机安全等级保护第三级为研究对象，分析了主机安全层的安全需求，设计了一个基于主机安全层的主机安全评估系统。首先，研究了主机安全层的安全评估要素的三层树状递阶层次结构模型。其次，在三层树状递阶层次结构模型的基础上，通过专家打分量化后，采用Fuzzy层次综合评判算法对主机安全综合评估值进行了计算，并对算法的可行性用一个实例进行了验证。最后，在算法的支撑下，设计了主机层的安全评估系统，并对系统的各模块功能进行了介绍和实现。设计本系统主要是希望降低安全风险评估的难度，提升安全风险评估的效率，更便于给安全管理员或测评工作者了解当前主机信息系统安全程度提供数据支持，降低安全风险管理成本。
[Abstract]:In daily life, the application of network technology has penetrated into all aspects, the frequent occurrence of information leakage, to people's personal and property security has brought great harm. Therefore, the protection of information has become a problem to be solved urgently in various industries. As an important part of information security protection, security risk assessment is of great significance for users in the industry to understand the security situation of information systems. However, the process of safety risk assessment is seriously hindered because of the complex process and long period of safety risk assessment. Therefore, targeted development automation, modular security risk assessment system is the future research focus of risk assessment services. This paper takes the third level of host security protection under Windows Server 2003 as the research object, analyzes the security requirements of host security layer, and designs a host security evaluation system based on host security layer. Firstly, the three-layer tree hierarchical model of host security assessment elements is studied. Secondly, on the basis of the three-layer tree hierarchical structure model, the fuzzy comprehensive evaluation algorithm is used to calculate the host computer security comprehensive evaluation value, and the feasibility of the algorithm is verified by an example. Finally, under the support of the algorithm, a host layer security evaluation system is designed, and the functions of each module of the system are introduced and implemented. This system is designed to reduce the difficulty of security risk assessment, improve the efficiency of security risk assessment, and provide data support for security administrators or assessment workers to understand the security degree of the current host information system. Reduce the cost of security risk management.
【学位授予单位】：贵州师范大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】