A Method of Network Security Risk Measurement Based on Improved D-S Evidence Theory

Abstract

This paper applies Dempster-Shafer (D-S) evidence theory to network security measurement and assessment, which improved the accuracy of network security measurement results. The main contents include improving the composition rules to solve the paradox, establishing a security measurement model, and proving the rationality of the improved method by three Distributed Denial of Service (DDoS) attacks experiment. The results show that this method is more accurate in detecting traffic attacks.