Abstract: This paper presents a survivability quantitative analysis method for network information system based on intrusion scenario. The method indicates that the survivability is not only relevant to the system but also to its running environment. So the survivability computing formulas are given according to attack scene. A case study proves the correctness and effectiveness of the method, it can find out the weak nodes that can be damaged by attacker and give the network administrator valuable suggestions to enhance system survivability.

Key words: survivability model, intrusion scenario, quantitative evaluation

摘要： 介绍一种基于攻击场景的系统生存性量化评估方法。该方法基于网络系统的生存性，不仅和本身有关，还与系统所处的环境密切相关。通过攻击图确定攻击场景，给出网络系统生存性的量化公式，帮助管理员有效确定影响系统生存性的关键节点，通过试验验证了该方法的有效性。

关键词: 生存性模型, 攻击场景, 量化评估

CLC Number: 

• TP309