Research on FAHP based Trojan attack effect evaluation

Chen-xi ZENG; Quan-yuan WU; Ai-ping LI; Rong JIANG

doi:10.11959/j.issn.2096-109x.2016.00073

您当前的位置：

首页 >

文章列表页 >

Research on FAHP based Trojan attack effect evaluation

Academic paper | 更新时间：2024-06-03

- Research on FAHP based Trojan attack effect evaluation
- Chinese Journal of Network and Information Security Vol. 2, Issue 7, Pages: 49-58(2016)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00073
  CLC： TN915.08
- Online First：2016-07，
  
  Published：15 July 2016
- 稿件说明：
移动端阅览
Chen-xi ZENG, Quan-yuan WU, Ai-ping LI, et al. Research on FAHP based Trojan attack effect evaluation[J]. Chinese Journal of Network and Information Security, 2016, 2(7): 49-58.
DOI：

Chen-xi ZENG, Quan-yuan WU, Ai-ping LI, et al. Research on FAHP based Trojan attack effect evaluation[J]. Chinese Journal of Network and Information Security, 2016, 2(7): 49-58. DOI： 10.11959/j.issn.2096-109x.2016.00073.

摘要

现有的网络攻击效果评估系统主要针对DDoS和蠕虫进行分析，缺乏对木马病毒的针对性。少数针对木马的危害度测量系统的指标值由人工标注，且都为定性值，稍欠客观性和全面性。基于该现状，从木马特性分析出发，建立针对木马病毒的层次化指标体系，设计指标值可定性也可定量，可人工标注也可系统采集。提出基于模糊层次分析的评估模型对木马攻击效果进行评估。同时，提出一种多对一的权重综合技术，对多组权重进行了合理的综合。最后，通过对比已有评估系统的评估结果，验证了所提评估技术的合理性。

Abstract

The particular characters of Trojan are not fully taken into consideration by existed network attack effect evaluation systems which mainly focus on DDoS and Warm.A few Trojan harm measurement systems is somewhat short for objectivity and completeness as the result of that its indicator values is confined to manually marked and qualitative values.Under the circumstances

the analysis of Trojan's features were started from

and a hierarchical index system which accepted both quantitative and qualitative values

and both manually marked and system col-lected values was built.Then

a FAHP based evaluation model was proposed to evaluate the Trojan attack effect.Meanwhile

a many-to-one method to ensemble multiple weight vectors was proposed.Finally

the rationality of proposed evaluation system was verified by comparison with others.

关键词

Keywords

references

XcodeGhost 入侵，大量 iOS 知名应用中招 [J ] . 中国信息安全， 2015 ( 10 ): 14 .

XcodeGhost invades a large number of well-known IOS applica-tions [J ] . China Information Security , 2015 ( 10 ): 14 .

韩兰胜，郑聪，邹梦松，等 . 计算机病毒危害性的模糊评价模型 [J ] . 小型微型计算机系统， 2010 , 31 ( 7 ): 1297 - 1301 .

HAN L S , ZHENG C , ZOU M S , et al . Fuzzy evaluation model for harms of computer virus [J ] . Mini-Micro Systems , 2010 , 31 ( 7 ): 1297 - 1301 .

李渊 . 基于层次分析法的木马危害测量分析系统 [D ] . 武汉：华中科技大学， 2012 .

LI Y . AHP based evaluation model for harms of Trojan [D ] . Wuhan : Huazhong University of Science and Technology , 2012 .

张建锋 . 网络安全态势评估若干关键技术研究 [D ] . 长沙：国防科学技术大学， 2013 .

ZHANG J F . Key technologies research on large scale network se-curity evaluation [D ] . Changsha : National University of Defense Technology , 2013 .

CUI X , TAN X , ZHANG Y , et al . A Markov game theory-based risk assessment model for network information system[C]// Interna-tional Conference on Computer Science and Software Engineering . c2008 : 1057 - 1061 .

张勇，谭小彬，崔孝林，等 . 基于Markov博弈模型的网络安全态势感知方法 [J ] . 软件学报， 2011 , 22 ( 3 ): 495 - 508 .

ZHANG Y , TAN X B , CUI X L , et al . Network security situation awareness approach based on markov game model [J ] . Journal of Software , 2011 , 22 ( 3 ): 495 - 508 .

鲜明 . 网络攻击效果评估导论 [M ] . 长沙：国防科技大学出版社， 2007 : 172 - 173 .

XIAN M . Introduction to network attack effect evaluation [M ] . Chang-sha : National University of Defense Technology , 2007 : 172 - 173 .

SATTY T L . How to make a decision:the analy-tic hierarchy proc-ess [J ] . European Joumal of Operational Research , 1990 , 1 ( 48 ): 9 - 26 .

CHANG D Y . Applications of the extent analysis method on fuzzy AHP [J ] . European Journal of Operational Research , 1996 , 95 ( 3 ): 649 - 655 .

张吉军 . 模糊层次分析法(FAHP) [J ] . 模糊系统与数学， 2000 , 14 ( 2 ): 80 - 88 .

ZHANG J J . Fuzzy analytic hierarchy process(FAHP) [J ] . Fuzzy Systems and Mathematics , 2000 , 14 ( 2 ): 80 - 88 .

谭学瑞，邓聚龙 . 灰色关联分析：多因素统计分析新方法 [J ] . 统计研究， 1995 ( 03 ): 46 - 48 .

TAN X R , DENG J L . Grey relational analysis:a new method of multivariate analysis [J ] . Statistical Research , 1995 ( 3 ): 46 - 48 .

钱吴永，党耀国，熊萍萍，等 . 基于灰色关联定权的Topsis法及其应用 [J ] . 系统工程， 2009 ( 8 ): 124 - 126 .

QIN W Y , DANG Y G , XIONG P P , et al . Topsis based on grey correlation method and its application [J ] . System Engineering , 2009 ( 8 ): 124 - 126 .

Views

240

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

⁰