Design And Implement Of Asset Assessment Of The Next Generation Network

With the development of NGN (next generation network), there is a continued surge in the number of the protocols and in the type of servies and equipment. The network environment is becoming increasingly complex and insecure, which causes a series of security issues in NGN. In order to avoid the occurrence of security incidents, risk assessment on the network is of important significance. Asset assessment is the basis of risk assessment in this link. Recently, the research of asset assessment for the risk assessment process in information system has already begun to achieve initial sueeess both at home and abroad, but in the field of the risk assessment of NGN, it is still blank.This thesis first analyzes the limitations when using traditional asset assessment methods in NGN, by summarying the work flow and research status of the asset assessment in traditional information security risk assessment, and redesignes a new asset assessment method based on the computation of service value. This method absorbes the framework of traditional asset assessment method, and creatively proposes a solution in detail to derive the asset value by the next generation telecommunication network service value and the relationship between assets and services. By giving the corresponding mathematics model, the originally asset assessment process based on qualitative analysis, has been optimized as a well organized, easy to operate process combining qualitative analysis and quantitative analysis. Secondly, this paper introduced a system implementing the asset assessment method above the next generation telecommunication network. This system took full account of the usability, optimized the interaction process, and provided with an automated supplementary tool, so that it greatly increased the efficiency of the asset assessment. In implementation, this system used the web platform based on the lightweight J2EE, and brought convenient experience to users when balanced the system expandability. Lastly, this paper tested the whole system and verified the feasibility of this system.