【摘要】 新一代航空电子系统呈现综合化、模块化的趋势,具有资源高度共享、信息快速传输、软硬件高度集成的特点,这些均对航空电子系统的信息安全性提出了新的要求。基于MILS(多级独立安全系统)架构的综合化航空电子系统给出了解决信息安全性的方案,其安全评估面临巨大的挑战。传统的CC评估方法因为其复杂性、耗时性、只能定性描述而不适用于MILS系统。为了达到定量的的安全评估,提出一种基于层次分析法(AHP)和灰度关联分析法(GRAP)的MILS安全性评估方法。AHP用于获取每个组件关于最终安全评估目标的权重。GRAP适合于分析评估数据来实现定量综合评估。这种新方法克服了CC评估的缺点并实现了MILS系统安全的定量描述。更多还原

【Abstract】 New avionics system appears in the tendencies of integration and modularization,and has the characteristics of resource sharing,high-speed information transmission,and extreme hardware and software integration.It raises a higher requirement for the information security of avionics systems.A solution for solving the information sacurity of the integrated avionics systems based on MILS architecture is proposed.But the MILS security evaluation has to confront a great challenge.Traditional common criteria(CC) evaluation method is not suitable for MILSs due to its complexity,time consumption and qualitative description.To achieve quantitative security assessment,a MILS security evaluation method based on AHP(analytic hierarchy process) and GRAP(grey relational analytic process) is proposed.AHP is used to obtain the weight of each component with respect to the final goal of the security evaluation.GRAP is adapted to analyze evaluation data to implement a quantitative integration evaluation.This new method overcomed the disadvantage of CC assessment and realized the quantitative description for MILS security.更多还原