Abstract:Security situation assessment is an effective way to analyze the situation of an information system, which helps administrator understand the current system risk status and make policy to response in time. However, the existing researches for security situation assessment mostly focus on network. The proposed methods for network are not so suitable for information systems. This paper proposes a hierarchical security situation analysis framework for information system, based on a classical NSSA [1] (network security situation analysis) model. The framework provides a standard flow for analyzing the security situation of information system. It consists a security situation analysis model of information system, an index system used in the model proposed, and a quantitative index fusion method to calculate a security situational value. We divided information system into 3 levels: sub-system level, composition level and index level. The collected information from the index level can be combined with grey model to determine the correlation degree between each major index and secondary index. Finally we calculate the whole system security situational value level by level. We use data from Tsinghua University information system to verify the proposed model and method. The result shows that this model can reflect the current security situation of information system comprehensively.

Modeling of Hierarchical Index System for Network Operation Security

Research of United Platform of Network Security Management Model

Network Operation Security Index Classification Model with Multidimensional Attributes

Using network security index system to evaluate network security

A Hierarchical Framework of Security Situation Assessment for Information System

Study on Evaluation for Security Situation of Networked Systems

Research And Implement Of Configurable Network Security Index System

Quantitative Hierarchical Threat Evaluation Model for Network Security

A Multidimensional Security Index System and Quantitative Level Protection Model

Evaluation Index System of Bank Network Security based on Analytic Hierarchy Process

Quantifiable Network Security Measurement - A Study Based on an Index System.

Definition of Evaluation Index Model for Network Management System

Research on Information Security Model and Security System Design

Hierarchical Risk Assessment Method for Network Security Based on Real-Time Warning

Hybrid-System Based Integrated Network Security Supervision System Model

RESEARCH ON QUANTITATIVE EVALUATION OF NETWORK SECURITY BASED ON ZACHMAN FRAMEWORK

Multiple behavior information fusion based quantitative threat evaluation

Open Management of Network Security Analoging Social Public Security Systems

Design and Implementation of A Network Security Management System

Modeling of Network Situation Awareness

Research and Application of a Network Security Quantitative Evaluation System