Evaluation of Vulnerability Severity Based on Rough Sets and Attributes Reduction
-
摘要: 计算机漏洞是危害网络安全的重大隐患，可以利用系统配置不当、系统设计缺陷或是软件的bug等对系统攻击.由于产生漏洞有多种因素，使得与漏洞相关的属性有很多，难以客观筛选强关联属性.而且在不依赖专家经验或是先验知识的基础上，确定属性权重的客观标准也是一个困难的问题.提出一种新的漏洞评估方法RAR，首先采用粗糙集理论中改进的可辨识矩阵算法，得到约简的漏洞强关联属性集；进而利用属性综合评价系统理论评估漏洞的严重性；最终获得二元组表示漏洞的定性评估值和定量评估值.实验结果体现该方法避免了主观选择漏洞强关联属性集和依赖专家先验知识，在漏洞属性约简和属性权重的计算上获得了满意的效果，对漏洞的定性分析和定量分析是准确有效的.Abstract: Computer vulnerability is a major hidden danger which endangers the safety of the network, and will attack the system by system configuration mistakes, system design flaws or software bugs. Due to a variety of factors which can produce vulnerability, there are many attributes associated with vulnerability, and it is difficult to shift attributes which are more relevant. It is also a hard problem to calculate attribute weights objectively which doesn’t depend on expert experience or prior knowledge. A new method named RAR of vulnerability assessment is proposed to shift vulnerability attributes and evaluate severity objectively. The attributes reduction for decision-making of vulnerability assessment is found depended on the discriminate matrix in rough sets theory. Then evaluate the vulnerability severity based on attributes comprehensive evaluation system theory. Finally we can get a binary group to represent qualitative evaluation and quantitative evaluation value of vulnerability. The result shows this method avoids the subjective choice for vulnerability attributes and the dependence of experts prior knowledge, and it satisfies for attributes reduction and attribute weights. And it is also accurate and effective for qualitative analysis and quantitative analysis of the vulnerability.
-
Keywords:
- vulnerability /
- network security /
- rough sets /
- attributes reduction /
- assessment of vulnerability
-
-
期刊类型引用(9)
1. 黄翔东，陈红红，甘霖. 基于频率-时间扩张密集网络的语音增强方法. 计算机研究与发展. 2023(07): 1628-1638 . 
本站查看
2. 许春冬，徐琅，周滨. 结合优化U-Net和残差神经网络的单通道语音增强算法. 现代电子技术. 2022(09): 35-40 . 百度学术
3. 葛宛营，张天骐，范聪聪，张天. 噪声情况下采用稀疏非负矩阵分解与深度吸引子网络的人声分离算法. 声学学报. 2021(01): 55-66 . 百度学术
4. GE Wanying，ZHANG Tianqi，FAN Congcong，ZHANG Tian. Monaural noisy speech separation combining sparse non-negative matrix factorization and deep attractor network. Chinese Journal of Acoustics. 2021(02): 266-280 . 必应学术
5. 王静红，梁丽娜，李昊康，周易. 基于注意力网络特征的社区发现算法. 山东大学学报(理学版). 2021(09): 1-12+20 . 百度学术
6. 张天骐，柏浩钧，叶绍鹏，刘鉴兴. 基于门控残差卷积编解码网络的单通道语音增强方法. 信号处理. 2021(10): 1986-1995 . 百度学术
7. 曹丽静. 语音增强技术研究综述. 河北省科学院学报. 2020(02): 30-36 . 百度学术
8. 张天骐，张晓艳，周琳，胡延平. 基于稀疏性的相位谱补偿语音增强算法. 信号处理. 2020(11): 1867-1876 . 百度学术
9. 时文华，张雄伟，邹霞，孙蒙. 利用深度全卷积编解码网络的单通道语音增强. 信号处理. 2019(04): 631-640 . 百度学术
其他类型引用(8)
计量
- 文章访问数: 1192
- HTML全文浏览量: 1
- PDF下载量: 814
- 被引次数: 17
下载:
