Evaluation Method of Information Network Security

点击翻译按钮获取中文摘要

Information networks have recently achieved a dramatic expansion, and such development has caused an increase of threats against the information network at the same time, e. g. computer viruses and worms (viruses for short). A demand for secure information networks has arose from this background. In order to build a secure information network we need first to assess the degree of security of the information network and then to introduce a proper treatment into it following the obtained assessment.In this study we focus on computer viruses and propose a method to quantitatively assess the degree of security aginst the computer viruses. According to the assessment result, we propose a measure for virus protection in the information network. The details are as follows.1. Theoretical analysis and simulation of spread and extinction of computer viruses : We study how computer viruses spread in an information network and what degree of a protective measure leads to virus extinction. In particular, we should observe the degree of the use of security measure at each node and the percentage of finding out viruses. From these studies we can quantitatively grasp the degree of security at nodes required for virus prevention.2. A.signature scheme using a compiler : Using digital signature we can check whether a software is infected with a virus or not. Especially, we consider a signature scheme using a compiler. With the use of a compiler, not only the chance of virus infection but also the work of a user is reduced.We can realize a certain degree of security integration of an information network through macroscopically observing the behavior of viruses and microscopically detecting viruses by the new software.