Abstract:Security situation assessment is an effective way to analyze the situation of an information system, which helps administrator understand the current system risk status and make policy to response in time. However, the existing researches for security situation assessment mostly focus on network. The proposed methods for network are not so suitable for information systems. This paper proposes a hierarchical security situation analysis framework for information system, based on a classical NSSA [1] (network security situation analysis) model. The framework provides a standard flow for analyzing the security situation of information system. It consists a security situation analysis model of information system, an index system used in the model proposed, and a quantitative index fusion method to calculate a security situational value. We divided information system into 3 levels: sub-system level, composition level and index level. The collected information from the index level can be combined with grey model to determine the correlation degree between each major index and secondary index. Finally we calculate the whole system security situational value level by level. We use data from Tsinghua University information system to verify the proposed model and method. The result shows that this model can reflect the current security situation of information system comprehensively.

Research on Structure Model of Information System Security Based on Systems Engineering

Research on Information Security Model and Security System Design

MODELING THE INFORMATION SYSTEM FROM THE SECURITY VIEW

Research of United Platform of Network Security Management Model

An Risk-Analysis-Centric Model of Information System Security Engineering

Theoretical Research about Information Security System Based on General System Theory

Research on Information Security Interaction Based on Behavior Trust Measurement Mechanism

A Security Model for Information Systems with Multi-level Security.

Research on multilevel security model for information systems classified protection

RESEARCH AND IMPLEMENTATION OF MODEL OF INFORMATION SECURITY EVALUATION

Business Activity-Oriented Security Model of Information Systems

Research on security structure of collaborative design system

An Analysis of Sensitive Information System Security Models

Model of Security Approach for Information System

Open Management of Network Security Analoging Social Public Security Systems

A Hierarchy Model on the Research Fields of Cyberspace Security Technology

Internet Security Models Based on Research of Complexity

Research on Information Security in Modern Network

Information System Security Model With Sharing

A Hierarchical Framework of Security Situation Assessment for Information System

New Security Model of Information Network System and Mathematical Evaluation