Evaluation Method of Information Network Security

近年来，信息网络实现了戏剧性的扩张，这种发展同时也导致了对信息网络的威胁的增加，例如计算机病毒和蠕虫(简称病毒)。在这种背景下，对安全信息网络的需求应运而生。为了建立一个安全的信息网络，首先需要评估信息网络的安全程度，然后在评估的基础上对其进行适当的处理。本文以计算机病毒为研究对象，提出了一种对计算机病毒的安全程度进行定量评估的方法。根据评估结果，我们提出了信息网络中的病毒防护措施。具体内容如下：1.计算机病毒传播和灭绝的理论分析和模拟：我们研究计算机病毒如何在信息网络中传播，以及何种程度的保护措施会导致病毒灭绝。我们尤其要观察每个节点使用安全措施的程度和发现病毒的百分比。通过这些研究，我们可以定量地掌握病毒预防所需节点的安全程度。A.使用编译器的签名方案：使用数字签名可以检查软件是否感染了病毒。特别是，我们考虑了一种使用编译器的签名方案。通过使用编译器，不仅减少了病毒感染的机会，而且减少了用户的工作量，通过新软件从宏观上观察病毒的行为，从微观上检测病毒，可以实现一定程度的信息网络安全集成。

Information networks have recently achieved a dramatic expansion, and such development has caused an increase of threats against the information network at the same time, e. g. computer viruses and worms (viruses for short). A demand for secure information networks has arose from this background. In order to build a secure information network we need first to assess the degree of security of the information network and then to introduce a proper treatment into it following the obtained assessment.In this study we focus on computer viruses and propose a method to quantitatively assess the degree of security aginst the computer viruses. According to the assessment result, we propose a measure for virus protection in the information network. The details are as follows.1. Theoretical analysis and simulation of spread and extinction of computer viruses : We study how computer viruses spread in an information network and what degree of a protective measure leads to virus extinction. In particular, we should observe the degree of the use of security measure at each node and the percentage of finding out viruses. From these studies we can quantitatively grasp the degree of security at nodes required for virus prevention.2. A.signature scheme using a compiler : Using digital signature we can check whether a software is infected with a virus or not. Especially, we consider a signature scheme using a compiler. With the use of a compiler, not only the chance of virus infection but also the work of a user is reduced.We can realize a certain degree of security integration of an information network through macroscopically observing the behavior of viruses and microscopically detecting viruses by the new software.