Vulnerability Risk Assessment of Security Systems and Proposal for System SLA

近年来，在高度先进和复杂的网络中引入了许多安全系统，但通常采用的是预主动的方法。然而，攻击是不可避免的，不可能阻止所有攻击，因此积极主动的方法很重要。这就是风险的概念。提出了一种有效评估信息安全风险的量化方法，并利用该方法构建了健壮的网络系统，提出了一种信息安全事件的预测方法。SLA（Security Level Agreement，安全级别协议）可以使用这些方法。

A lot of security systems are introduced in recent highly advanced and sophisticated networks, but pre-active methods are used usually. However attacks are inevitable and it is not possible to stop all of them, so proactive methods are important. This is the idea of RISK. We presented a quantities approach for the effective and efficient assessment of risks related to information security, construct robust network systems using this assessment, and proposed a forecasting method of information security related incidents. SLA (Security Level Agreement) is possible using these methods.