Research On Security Assessment For Mobile Intelligent Terminal Within Wireless LAN

At present, mobile intelligent terminal with smart phones as the representative has been widely used in people’s work, study and life. However, the security threats from the wireless link, wireless network entity and terminal itself makes users who use smart mobile terminal face more serious security problem. Security precautions have been existed mostly belongs to passive defense, which is difficult to resist the unknown complex security threat, so there are some limitations. The existing security assessment schemes are lack of theoretical support, less comprehensive consideration of terminal itself factors, less consideration of environmental factors and lack of available assessment tools. To solve the above problems can avoid or reduce the security risk and improve the security of mobile intelligent terminal.First, some relevant concepts and theories about security risk evaluation are introduced and then we give some related definitions, objectives and contents. It is important that proposing the process, analyzing the indicator structure model and concluding some typical methods of evaluating the security risk of mobile intelligent terminal, which provides the theoretical foundation for the following work.Afterwards, the method of evaluating the security risk of mobile intelligent terminal considering wireless LAN is focused on by the researcher. In order to make the evaluation more system, we add wireless link and wireless network subject into the objectives of security evaluation to avoid the problem of single current researches’objective. To analyze the evaluation objective’s fragility and its relation with the security risk, we introduce the risk state figure to provide the basis for the selection of evaluation indicators for evaluating security risk and fragility. To standardize the evaluation process, we apply the SCAP-based standard construct the indicator structure of security risk evaluation of mobile intelligent terminal to provide the standard of evaluation test. To accurately determine the grade evaluation of security of mobile intelligent terminal, we combine the AHP and FCE algorithm together and make an accurate assessment of mobile intelligent terminal by many factors restricted. At last, we present a computation instance of security evaluation of mobile intelligent terminal and make some conclusions about the security evaluation scheme proposed in this thesis.Finally, the mobile intelligent terminal security evaluation system that is based on Android platform in Java is realized. Based on the designing thoughts and the main structure figure, that explain the technology used in the evaluation test module, evaluation data process module and evaluation result visualization module. The evaluation test module, including the test of indicators of wireless network environment and the mobile intelligent terminal itself is mainly described and the running details are also showed in this thesis.