Abstract: To solve the problem that scan item is incompleteness and quantitative assessment is insufficient, this paper brings qualitative and quantitative analysis into host assessment, proposes an assessment model based on multivariate data fusion and hierarchical analysis. It combines consistency check by adopting value engineering and judgment matrix, scans and assesses system from 11 kinds of aspect and 36 kinds of item. Application of FoundLight host security assessment system results show that this system is function complete, performance stability and operation simple.

Key words: security assessment, multivariate scan, data fusion and hierarchical analysis

摘要： 为解决现有主机安全扫描项不全，定量评估不足的问题，将定性和定量分析用于主机评估，提出基于多元数据融合和层次分析的评估模型。采用专家打分方法构造两两比较判断矩阵，结合一致性校验，从11个方面36项全面扫描并评估系统。应用于FoundLight主机安全评估系统中的结果表明，该系统功能齐全、性能稳定、操作简便。

关键词: 安全评估, 多元扫描, 数据融合和层次分析

CLC Number: 

• TP393