【摘要】 信息安全在企业信息系统建设中越来越重要,如何评价信息安全技术成为当前的一个研究课题.文中基于博弈论,对由防火墙、入侵检测系统和容忍入侵技术构成的三层安全体系结构进行了分析,提出了对信息安全技术进行评价的模型.在对入侵检测系统分析评价的基础上,重点分析了防火墙、入侵检测与容忍入侵的相互影响和关系.研究表明,IDS的检测率、误报率与防火墙的性能有密切关系,系统安全配置直接影响信息安全机制的性能和成本效益,容忍入侵机制取决于入侵的损失评估、系统的成本和防火墙与IDS的性能.信息安全机制的优化配置对于信息安全的效果具有重要影响.更多还原

【Abstract】 Information security is more and more important in a firm’s information systems.How to value the information security technologies is an important research issue recently.In this paper,the evaluation model of information security technologies is proposed based on game theory.And the information security technologies include firewall,intrusion detection system and intrusion tolerant which construct the three layers architecture.First,the value of intrusion detection system is presented.Then the relation between firewall,intrusion detection and intrusion tolerant is analyzed.It is found that the detection rate and false alarm rate are affected by the performance of the firewall.Research results show that the configuration of the information security technologies determines whether these technologies realized a positive or negative value.Intrusion tolerant is determined by the loss incurred by intrusion,the cost of the redundancy of the system,and performance of firewall and intrusion detection.It is important to a firm by optimal configuration for information security technologies.更多还原