Network Security Assessment Model

The paper, which aims at systematic security in the real world。 According to scientific procedure and method, it carries on abundant qualitative analysis and quantitative analysis to the dangerous key element in the system, and makes effective safety measure。 Requirement for Security is changing from information security to information assurance。 Traditional passive protection can't adapt to this new situation, then enhanced defense and proactive defense are proposed。This paper described the current situation of network security, the current situation of network evaluation and the evaluation standard of the security of network information。 Including TCSEC (Trusted Computer System Evaluation Criteria; commonly called the "Orange Book"), which is a standard for computer security issued by the US government; ITSEC (the Information Technology Security Evaluation Criteria), which is a standard for computer security that was issued by the Europe, CC (Common Criterion), which is a world standard for computer security; GB 17859-1999 , which classified criteria for security protection of Computer information system in China。 Many qualitative and uncertain factors of network evaluation considered , this paper introduces emphatically about Fuzzy Synthesis Evaluation Modeling Method of network。 How to discern, analyze and appraise by using of theory and method of system engineering the possibility happening about inherent or potential risk of network information security and the dangerous factor。 The evaluation step about network synthesis security risk has been described。 Based on hardware and software and external environment condition, synthesis Evaluation Index system can be established。 Set up five first level indexes, such as the entity and environment security of the network, the organization and management system , safe practice measure , communication security of the network。 Corresponding to each first level...