Study Of An Expert System Based On Production Rules For Information Security Risk Assessment

In the paper, it is described with a prototype application that Expert System technology is applied to the field of information security risk assessment (ISRA). The prototype can provide overall evaluation solution to potential information security risk in military industrial units with integration of indicator system, assessment methods, and Expert System technology. In the chapter an in-depth analysis is indicated on the key technology of Expert System, including knowledge representation, knowledge acquisition, uncertainty reasoning, reasoning explanation and so on. On analyzing database technology used to organize knowledge base construction, the paper provides algorithm design of validity and integrity checking to knowledge set and proposes solution to pattern matching algorithm (methods), the transfer and updates of the uncertainty, heuristic search and conflict resolution by research of uncertainty reasoning technology; Explanation mechanism which is achieved based on the pre-text and successful combination of path tracking, in order to complete the assessment results (reasoning) explanations.On the basis of the research of key technologies, the paper presents an architecture design, functional composition, the detailed design of the functions and the major data storage structures. Based on the detailed design of functions, the paper describes detail indication about two modules of knowledge base management and risk analysis which are achieved with C# in .Net platform. On the basis of Waterman's level evaluation method of expert system, the prototype is proven on the according level.