论文部分内容阅读
以基于用户安全属性偏好的Web服务安全综合评估为研究目标,在传统Web服务体系架构基础上进行功能扩展,设计出了一个Web服务安全评估模型,研究并提出了一种服务安全评估方法.使用标准值策略结合多属性决策Topsis算法进行综合评估;采用对候选服务进行协议分析、漏洞检测等方式收集数据,并把Web服务提前进行过滤筛选,按数据的类型进行量化,计算用户的安全属性偏好权重,将经过量化后的服务安全属性值按照Topsis算法进行选择.对该方法进行了相关实验验证,结果表明该方法能较好选择出满足用户安全属性偏好需求的Web服务.
Based on the comprehensive evaluation of Web services security based on the preference of user security attributes, this paper extends the traditional Web services architecture to design a Web services security assessment model and studies a service security assessment method. Standard value strategy combined with the multi-attribute decision-making Topsis algorithm for comprehensive evaluation; the use of candidate services for protocol analysis, vulnerability detection and other ways to collect data, and Web services filter in advance filtering, according to the type of data to quantify the user’s security preferences Weights, and then the quantified service security attribute values are selected according to the Topsis algorithm.The experimental results show that the proposed method can select the Web service satisfying the preference of user security attributes.