Abstract:Security situation assessment is an effective way to analyze the situation of an information system, which helps administrator understand the current system risk status and make policy to response in time. However, the existing researches for security situation assessment mostly focus on network. The proposed methods for network are not so suitable for information systems. This paper proposes a hierarchical security situation analysis framework for information system, based on a classical NSSA [1] (network security situation analysis) model. The framework provides a standard flow for analyzing the security situation of information system. It consists a security situation analysis model of information system, an index system used in the model proposed, and a quantitative index fusion method to calculate a security situational value. We divided information system into 3 levels: sub-system level, composition level and index level. The collected information from the index level can be combined with grey model to determine the correlation degree between each major index and secondary index. Finally we calculate the whole system security situational value level by level. We use data from Tsinghua University information system to verify the proposed model and method. The result shows that this model can reflect the current security situation of information system comprehensively.

The Security System Analysis of Teaching and Researching Management System Based on Audit Strategy

Research on Information Security Model and Security System Design

Practical Way to Implement Role-Based Access Control in Security Administration System

Research and implementation on auditing in RBAC-based systems

Design And Realization Of Network Security Audit And Monitoring System

New Database Security Auditing System

A Business Process-based Method on Security Requirement Analysis of Information Systems

Realization Method about Access Control of System Based on Web

A Hierarchical Framework of Security Situation Assessment for Information System

A Security Situation Assessment Method Based on Support Vector Regression for Power Monitoring System.

Research on Network Security of Information Systems Based on LAN

A New Database Security Scan System

DESIGN AND IMPLEMENTATION OF SECURITY AUDITING SYSTEM FOR LINUX SERVER

The Research on Safety Management Information System of Railway Passenger Based on Risk Management Theory

Study on Urban Public Safety Management System

Design and Implementation of Security Access Management System

Research of User Access Control for Networked Manufacturing System

The Design and Implementation of Security Protection System for Website in University

Asset Management Early Warning Analysis in Higher Education Institutions from an Audit Perspective

[The Explore of the Security Strategy Model in Hospital Mobile Clinic New Mode].

The Safety Analysis of the Unicom Resource Management System Based on Spring Security Security Framework