Network security equipment evaluation based on attack tree with risk fusion

Abstract

Network security equipment is crucial to information systems,and a proper evaluation model can ensure the quality of network security equipment.However,there is only a few models of comprehensive models nowadays.An index system for network security equipment was established and a model based on attack tree with risk fusion was proposed to obtain the score of qualitative indices.The proposed model implements attack tree model and controlled interval and memory (CIM) model to solve the problem of quantifying qualitative indices,and thus improves the accuracy of the evaluation.

Keywords

• attack tree
• evaluation
• network security equipment
• risk fusion