The Research On The Assessment Of The Attack Resistances Based On The Attack Cost And Attack Effect

With the structures and the rapid development of the information superhighway, internet has become an important part of the global information communication infrastructure and played an important role in military, life and culture. Because of the openness, sharing and real-time characteristics, the risk of network information system exposed. The system design defects and vulnerabilities are exploited in different degrees by the hackers to make unjustified attacks to the network system, resulting in a huge threat to the confidence, integrity, availability, privilege, non-repudiation and controllability of the information data from various network attacks.Given the above problems, a concept of "attack resistance" is suggested by this article, used to distinguish the basic network risk classification. With the excavation to the mainstream attacking database, the atomic risk classification came out, causing the result of index system for network risk assessment based on atomic risk, which can be divided into "host risk-property-assessment index-acquisition index". The whole index system has laid an important foundation for the risk assessment process to take a bottom-up evaluation process, calculating the upper index by the lower index and finally the quantitative value of the host risk.