1. 石家庄铁道大学信息科学与技术学院,河北,石家庄,050043
2. 清华大学软件学院,北京,100084
3. 中国信息安全测评中心,北京,100085
4. 石家庄铁道大学信息科学与技术学院,河北,石家庄,050043
5. 清华大学软件学院,北京,100084
6. 中国信息安全测评中心,北京,100085
纸质出版:2013
移动端阅览
高志伟, 姚尧, 饶飞, 等. 基于漏洞严重程度分类的漏洞预测模型[J]. 电子学报, 2013,41(9):1784-1787.
GAO Zhi-wei, YAO Yao, RAO Fei, et al. Predicting Model of Vulnerabilities Based on the Type of Vulnerability Severity[J]. Acta Electronica Sinica, 2013, 41(9): 1784-1787.
高志伟, 姚尧, 饶飞, 等. 基于漏洞严重程度分类的漏洞预测模型[J]. 电子学报, 2013,41(9):1784-1787. DOI: 10.3969/j.issn.0372-2112.2013.09.018.
GAO Zhi-wei, YAO Yao, RAO Fei, et al. Predicting Model of Vulnerabilities Based on the Type of Vulnerability Severity[J]. Acta Electronica Sinica, 2013, 41(9): 1784-1787. DOI: 10.3969/j.issn.0372-2112.2013.09.018.
软件漏洞预测模型有许多种
能预测软件中存在的漏洞总数以及发生的时间间隔
但不能预测软件漏洞的严重程度.然而在某些场合
如软件可信性
我们不仅要考虑软件漏洞发生的总数和时间间隔
而且也要考虑漏洞发生的严重程度对软件可信性的影响.既是在传统的软件安全性研究中
考虑漏洞发生的严重程度的影响
对软件的使用和风险控制也是很重要的.本文基于传统的马尔可夫模型
将软件漏洞按发生的严重程度进行分类
获得了一种新的软件漏洞预测数学模型.利用该模型不仅能够预测软件中存在的漏洞总数和时间间隔
而且同时也能预测每一类的漏洞总数和漏洞种类
试验表明有较好的准确度
这是其它漏洞预测模型所无法预测的.
There are many kinds of software vulnerability prediction models which are capable of predicting the total number and the time interval of occurrence of vulnerabilities in the software. But none of them can predict the severity of software vulnerabilities. However
in some cases
such as software credibility
we have to consider the total number of software vulnerabilities and time interval as well as the vulnerability severity affecting the trustworthiness of software. Considering the impact of the vulnerability severity
the application and risk control of software is also very important in the traditional software security. Based on the traditional Markov model
we classified the severity of software vulnerabilities occurrence
proposed a new software vulnerability prediction mathematical model. The model can not only predict the total number of software vulnerability and the time interval
but also the total number vulnerabilities of each class as well as the type of the vulnerabilities. Our tests showed that it has better accuracy
and the type of information that other prediction models can not offer.
0
浏览量
1934
下载量
4
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621