基于可靠性理论的分布式系统脆弱性模型 - semantic scholar.pdf

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software, Vol.17, No.7, July 2006, pp .1633−1640 DOI: 10. 1360/jos171633 Tel/Fax : +86-10 © 2006 by of Journal of Software. All rights reserved. ∗ 基于可靠性理论的分布式系统脆弱性模型 + 冯萍慧 , 连一峰, 戴英侠, 鲍旭华 (信息安全国家重点实验室( 中国科学院 研究生院),北京 100049) A Vulnerability Model of Distributed Systems Based on Reliability Theory + FENG Ping-Hui , LIAN Yi-Feng, DAI Ying-Xia, BAO Xu-Hua (State Key Laboratory of Information Security (Graduate School, The Chinese Academy of Sciences), Beijing 100049, China) + Corresponding author: Phn: +86-10 Fax: +86-10 E-mail: phfeng@, Feng PH, Lian YF, Dai YX, Bao XH. A vulnerability model of distributed systems based on reliability theory. Journal of Software, 2006,17(7):1633−1640. /1000-9825/17/1633.htm Abstract: After the analysis and comparison of the existing vulnerability analysis methods, a new vulnerability model of distributed systems based on reliability theory is proposed. First, it models vulnerabilities of distributed systems from the aspects of security-related factors. Then it utilizes the model checking method to build Vulnerability State Graph (VSG) of distributed systems to depict the complete process of exploitation of vulnerabilities. Finally, it introduces reliability theory to perform analysis and quantitative evaluation of vulnerabilities of distributed systems, which provides a theoretical evidence for security enhancement. Key words: distributed system; vulnerability model; vulnerability state graph; reliability ; reliability function 摘 要: 对现有的脆弱性分析方法进行分析和比较,提出基于可靠性理论的分布式系统脆弱性模型.针对影响 分布式系统安全性的各项因素进行脆弱性建模,利用模型检验方法构造系统的脆