网络安全事件危害度的量化评估

Detriment quantitative assessment of the network security incidents

摘要:

为评价安全事件造成的危害程度，从网络系统可用性的角度出发提出基于性能指标的网络安全事 件危害度量化评估方法，选取路由器节点与链路等网络底层关键组成部分的性能评价指标，利用网络熵值量 化描述网络底层性能属性，用网络熵值在安全事件攻击前后的变化来度量攻击对网络可用性的影响程度．搭 建了大规模网络蠕虫攻击事件模拟试验平台，采用省级节点的实际网络环境进行验证．实验结果表明，在攻 击发生时，选取的底层性能指标能有效反映网络的危害程度，省级节点实验更一步验证该方法能有效地应用 于大规模网络可用性量化评估中

Abstract:

From the point of view on the network system availability, to evaluate the harm caused by security incidents, a performance - based quantification assessment method of network security is proposed. The meth- od references the concept of entropy in information theory to quantify the performance indexes by choosing router nodes, and compares these index changes in the entropy before and after the security incident to meas- ure the impact on the network. Worm simulation and actual provincial nodes experiment show that the pro- posed approach can be effectively applied to the quantification assessment of large-scale network availability