复杂网络安全产品质量评价体系的知识建模及其应用

doi:10.3969/j.issn.1671-1122.2018.09.009

信息网络安全 ›› 2018, Vol. 18 ›› Issue (9): 55-59.doi: 10.3969/j.issn.1671-1122.2018.09.009

复杂网络安全产品质量评价体系的知识建模及其应用

李毅¹, 顾健¹, 顾铁军²

1. 公安部第三研究所公安部信息安全产品检测中心, 上海 200031
2.东华大学, 上海 201620

收稿日期:2018-07-17 出版日期:2018-09-30 发布日期:2020-05-11
作者简介:
作者简介：李毅（1978—）,男,安徽,副研究员,硕士,主要研究方向为网络安全、软件测试 ;顾健（1963—）,男,江苏,研究员,博士,主要研究方向为信息安全;顾铁军（1978—）,女,江苏,副教授,博士,主要研究方向为信息管理、电子政务。
基金资助:
公安部技术研究计划[2016JSYJB45]

Knowledge Modeling and Application of Quality Evaluation System for Complex Network Security Product

Yi LI¹, Jian GU¹, Tiejun GU²

1. Information Security Products Testing Center of Ministry of Public Security, The Third Research Institute of Ministry of Public Security, Shanghai 200031, China
2. Donghua University, Shanghai 201620,China

Received:2018-07-17 Online:2018-09-30 Published:2020-05-11

摘要/Abstract

摘要：

复杂网络安全产品的质量评价体系表现出知识关联特征,发掘这些特征将有助于提高评价决策的科学性和合理性。文章借助本体理论和技术方法,通过研究其质量评价体系在指标表述上的知识属性,提出了一套面向复杂网络安全产品质量评价体系的通用知识建模方法,并以防火墙产品质量评价为例展开实证研究,探讨了该知识模型对评价决策工作的支持应用。

关键词: 网络安全产品, 质量评价体系, 本体

Abstract:

The quality evaluation system of complex network security products exhibits the characteristics of knowledge correlation, mining which will help to improve the scientificity and rationality of evaluation decisions. Based on the ontology theory and technology, a general knowledge modeling method for the quality evaluation system of complex network security products was provided. In addition, an empirical study of the firewall quality evaluation was carried out. The results show that the knowledge model supports the decision-making of evaluation.

Key words: network security product, quality evaluation system, ontology

中图分类号:

TP309

李毅, 顾健, 顾铁军. 复杂网络安全产品质量评价体系的知识建模及其应用[J]. 信息网络安全, 2018, 18(9): 55-59.

Yi LI, Jian GU, Tiejun GU. Knowledge Modeling and Application of Quality Evaluation System for Complex Network Security Product[J]. Netinfo Security, 2018, 18(9): 55-59.

图/表 2

参考文献 16

[1]	ZHANG Wenxiu, ZHU Qinhua.Research on Construction Methods of Domain Ontology[J]. Library&Information, 2011, 2011(1):16-19.
	张文秀,朱庆华.领域本体的构建方法研究[J].图书与情报, 2011, 2011(1):16-19.
[2]	SHANG Xinli.Comparative Analysis of Foreign Ontology Construction Methods[J]. Library and Information Service, 2012, 56(4):116-119.
	尚新丽. 国外本体构建方法比较分析[J].图书情报工作, 2012, 56(4):116-119.
[3]	USCHOLD M,GRUNINGER M.Ontologies: Principles,Methods and Applications[J].Knowledge Engineering Review, 1996, 11(2):14-17.
[4]	NOY N F, MCGUNINNESS D L.Ontology Development 101: A Guide to Creating Your First Ontology[R]. Knowldege Systems Laboratory, Stanford University,Stanford Knowledge Systems Laboratory Technical Report KSL-01-05 and Stanford Medical Informatics Technical Report SMI-2001-0880, 2001.
[5]	Schreiber G, Wielinga B, Jansweijer W.The KACTUS View on the 'O' Word[J].IJCAI Workshop on Basic Ontological Issues in Knowledge Sharing, 1995,98(98):159-168.
[6]	FOX M S,GRUNUNGER M.Enterprise Modeling[J].AI Magazine, 1998, 19(3):109-121.
[7]	USCHOLD M,KING M,MORALEE S,et al.The Enterprise Ontology[J].The Knowledge Engineering Review, 1998, 13(1):31-89.
[8]	FERNDANDEZ M,GORMEZ P A,JURISTO N.Methontology: From Ontological Art towards Ontological Engineering[EB/OL].,2018-6-15.
[9]	LIU Wei, LI Quan-lin, RUI Li.A Performance Analysis Method for Intrusion Prevention System[J]. Netinfo Security, 2015, 15(9): 46-49.
	刘伟, 李泉林, 芮力. 一种入侵防御系统性能分析方法[J]. 信息网络安全, 2015, 15(9): 46-49.
[10]	ZHANG Qingliang, QIN Yuanqing.Research on Security Assessment Index and Its Application for Shipboard Network Based on DDS[J]. Netinfo Security, 2017, 17(2): 73-78.
	章清亮, 秦元庆. 基于DDS通信的舰载网络安全评估指标及应用研究[J]. 信息网络安全, 2017, 17(2): 73-78.
[11]	BIALAS A.Ontology-Based Security Problem Definition and Solution for the Common Criteria Compliant Development Process[C]//IEEE. International Conference on Dependability of Computer Systems, June 30-July2,2009,Brunow, Poland. Depcos-Relcomex. NJ: IEEE, 2009:3-10.
[12]	BIALAS A.Common Criteria Related Security Design Patterns for Intelligent Sensors—Knowledge Engineering-Based Implementation[J].Sensors, 2011, 11(11):8085-8114.
[13]	ZHANG Zheng.Research On Product Reviews Based on Domain Ontology[D]. Xinxiang: Henan Normal University,2012.
	张征. 基于领域本体的产品评价研究[D]. 新乡: 河南师范大学, 2012.
[14]	FENG Shufang,WANG Suge.The Construction of Automobile Domain Ontology Knowledge Base for Opinion Mining[J].Computer Applications and Software, 2011, 28(5):45-47.
	冯淑芳,王素格.面向观点挖掘的汽车评价本体知识库的构建[J].计算机应用与软件, 2011, 28(5):45-47.
[15]	GU Tiejun,LI Yi,GU Jian.Ontology Modeling for Network Vulnerability Scanners Standard and Research on Related Evaluation Tool[J]. Netinfo Security, 2013, 13(10): 141-143.
	顾铁军,李毅,顾健. 网络脆弱性扫描产品标准本体构建及测评工具研究[J]. 信息网络安全, 2013,13(10): 141-143.
[16]	GB/T 20281-2015, Information Security Technology-Security Technical Requirements and Testing and Evaluation Approaches for Firewall[S].Beijing: China standard press,2015.
	GB/T 20281-2015,信息安全技术防火墙技术要求和测试评价方法[S].北京:中国标准出版社,2015

复杂网络安全产品质量评价体系的知识建模及其应用

Knowledge Modeling and Application of Quality Evaluation System for Complex Network Security Product

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 2

参考文献 16

相关文章 8

编辑推荐

Metrics

本文评价

[1]	梁中, 周嘉坤, 朱汉, 陈波. 基于安全本体的信息安全知识聚合技术研究[J]. 信息网络安全, 2017, 17(4): 78-85.
[2]	季玉香, 朱延, 唐晓强. 基于Web的软件安全分析与监测[J]. 信息网络安全, 2016, 16(9): 208-212.
[3]	余小军, 温巧燕, 张玉清, 吴亚飚. 云计算的可信性概念建模[J]. 信息网络安全, 2016, 16(9): 223-227.
[4]	顾铁军;李毅;顾健. 网络脆弱性扫描产品标准本体构建及测评工具研究[J]. , 2013, 13(10): 0-0.
[5]	景宁;樊洪海;翟应虎;刘德智. 面向钻井工程的数据仓库解决方案研究[J]. , 2012, 12(6): 0-0.
[6]	贾保先;谢圣献. 基于本体和上下文感知的主动式计算机犯罪取证模型设计研究[J]. , 2012, 12(1): 0-0.
[7]	赵浩;赵建蕊;付继存. 从腾讯与奇虎之争看网络安全产品面临的法律困境[J]. , 2010, (12): 0-0.
[8]	张以标. 插件(软件)作品的侵权案法律透析[J]. , 2009, 9(11): 0-0.