Leo Satellite Communications Network, Information Security Risk Assessment Model And Method

Satellite Communication Network Information Security Risk Assessment (SCNISRA) is used to actively identify the potential information security risks in satellite communication network and assess the harm caused by the risks and the possibility of the risks。By conducting the assessment, the security managers can be correctly and comprehensively aware of the information security environment and security conditions of the satellite communication network, which help to make customized and effective measures to control the information security risks within an acceptable range, and insure that the satellite communications network works efficiently and safely. Furthermore, the continual information security risk assessment for satellite communication network can test the effectiveness of the information security measures and anti-risk ability of the network.This paper takes the information security risk assessment of Low Earth Orbit (LEO) Satellite Communications Network as research background, and by combining Network Security Situation Awareness and CORAS framework, proposes a CORAS Risk Assessment Model based on Network Security Situation Awareness. The model includes three phases:①threat situation perception based on DS theory②hierarchical risk quantitative analysis based on Probabilistic Risk Analysis③risk discrimination,and proposes one concrete risk assessment method based on CORAS framework specific to the characteristic of each phase. The proposed model and method have effectively solved the problem that the NSSA is lack of a precise mathematical quantitative method, and can describe real-time risk information of the whole network,security situations of every satellite node and threat situation of every service on satellite nodes, and they are more relevantly and effectively on making safety suggestions for the information security of LEO Satellite Communications Network.At last, we take Iridium Satellite Communication Network as an example to make a simulation and assessment. Through the experiment, the proposed model and method are verified to be valid.