Information Security Evaluation For Network Security Devices

The Internet is a significant engine of the transformation and upgrading of the economic.The urgency and importance of safeguarding network security is becoming increasingly prominent with the development of society.In improving the reliability of online applications,and preventing damage to network resources,network security devices plays a vital role.At present,the information security evaluation for security devices is carried out globally.However,it lacks a unified and reasonable measure for the all the devices,so that the government,enterprises and institutions have no references while choosing a network security device.In view of this,this paper researched on evaluation model for network security devices,the main work is as follows:(1)Proposed a layered tree index system for network security devices.According to the existing security requirement for network security devices,this paper combined the working principles of network security devices,analyzed their requirement from five aspects,and formed a layered tree index system.(2)Proposed a multi-level evaluation model for network security devices by building appropriate evaluation methods for each level one index after pre-processing the index system.An environment-related information security evaluation model was proposed to count environment factor in while evaluating performance index.An CIM based attack tree model was proposed,which converts qualitative reliability indices to quantitative indices and thus achieves an objective result,by building attack trees from the attackers' point of view.(3)Proposed the indices for the results of evaluation.The validity of this proposed multi-level evaluation model was verified by conducting experiments over a variety of evaluation methods.The result were analyzed from three dimensions including best-worst consistency,decreasing ratio,and standard deviation.The experimental result shows that the proposed multi-level evaluation model for network security devices performs well in terms of accuracy and stability,which solved the problem that network security devices not having accurate evaluation result.