作　　者： (赵健）; (王瑞）; (李正民）; (雷敏）; (马敏耀）;

机构地区： 西北大学信息科学与技术学院

出　　处： 《北京邮电大学学报》 2017年第S1期135-139,共5页

摘　　要： 物联网系统存在诸多安全隐患,当前的物联网系统评估分析方法是定性的分析评估方法,缺乏量化的评估分析方法.列出物联网系统面临的攻击,将攻击按照攻击面和攻击点进行分类,根据每种安全威胁的危害程度、发生概率以及补救措施的复杂程度,利用模糊综合评价法进行分析,构建一个安全分析的模型,从而可对物联网系统进行定量的分析,实现了物联网系统的安全量化评估. Internet of things( IoT) system is a complex system,which faced with serious security challenges. Current risk evaluation method of IoT is qualitative but lack of quantitative assessment methods.Malicious attacks of IoT system are classified according to attack surface and attack point. Then a security analysis model using fuzzy comprehensive evaluation method is proposed bases on three elements of each attack,there are damage degree,occurrence probability and the complexity of reinforcement,which can be used as quantitative assessment methods of IoT system.

关 键 词： 物联网系统安全 安全威胁 风险评估 模糊综合评价