摘要
Abstract
To address the problems existing in the quantitative evaluation of network security situation,such as incomplete information,incon-sistent expert evaluations,and low evaluation accuracy resulting from equal indicator weights in the conventional Analytic Hierarchy Process-Fuzzy Comprehensive Evaluation(AHP-FCE)method,this paper proposes an improved AHP-FCE network security situation evaluation model based on incomplete-information non-cooperative game.Firstly,a network security situation indicator(NSSI)system with 15 specific indicators is constructed from the network layer,host layer and service layer.This indicator system can relatively comprehensively reflect risk factors con-cerning network anomalies,asset vulnerabilities and external threat attacks.Secondly,the indicator weighting behavior of experts is modeled as a non-cooperative game.The cosine similarity coefficient is adopted to measure the coordination and consistency of decision-makers' scoring results.A profit function with penalty terms is constructed,and an iterative algorithm based on mixed strategy Nash equilibrium is utilized to obtain the optimal comprehensive weights.Finally,comparative validations with different models demonstrate that,compared to traditional AHP-FCE methods,commonly used evaluation models,and other composite weighting methods combined with game theory,the proposed mod-el achieves superior performance in both accuracy and stability.关键词
网络安全态势量化评估/不完全信息博弈/纳什均衡/AHP-FCE/指标赋权Key words
network security situation quantitative assessment/incomplete information game/Nash equilibrium/AHP-FCE/indicator weigh-ting分类
信息技术与安全科学
