Research And Implementation Of Quantitative Threat Evaluation Of Network Worm Based On Hierarchical Model

With the rapid development of the Internet,the network security situation is becoming increasingly severe.Internet worm is an important factor threatening the security of the Internet because of its rapid spread.In recent years,the worm "Stuxnet" spreads in the steel,electricity,chemical industry and other important industries,the most serious accident caused by which is the delayed nuclear power generation in Iran.The evaluation of the harm of network worms can make people understand how dangerous the worm is,at the same time it can evaluate performance of network worms in all aspects,which is helpful to the prevention of network worms,and have important significance in combating cyber crime and the application of network worms.At present,there is no unified method to evaluate the vulnerability of network worms.The major information security companies have different criteria for evaluating the vulnerability of network worms.Most of the existing assessment methods are classified to the extent of the virus harm.This is a rough evaluation method,which cannot get satisfactory results when comparing the harmfulness of different network worms.Moreover,most of these methods can only get the overall evaluation of the harm of the network worm,but cannot know the ability of the worm in different aspect like spread and destroy.In order to solve these problems,this paper establishes a quantitative evaluation model of the network worm's harmfulness.This evaluation model can not only evaluate the harm of the network worm,but also evaluate the ability of the worm on the aspects of propagation,destroying,concealment and defense.The main work is as follows:Do the research of computer virus evaluation at home and abroad.On this basis,the characteristics and common technologies of network worm are studied.According to above,the ability of the network worm is divided into four aspects: the communication ability,the destruction ability,the concealment and the defense ability,and the corresponding evaluation index in these four aspects are put forward.Establish a hierarchical model for evaluating the vulnerability of network worms.Use the FAHP algorithm,weighted average method,maximum value method,to design a scientific and reasonable evaluation algorithm.Gather the data of index from the bottom to top with the method,then get network worm hazard assessment results.In this paper,an evaluation system is constructed,which is based on the above evaluation model.The experimental results show that the quantitative evaluation model of hierarchical network worm hazard established in this paper,is with consistency and sensitivity,it can not only make the quantitative assessment of network worm damage,but also evaluate the worms from the various aspects.