Research on security risk assessment technology of cryptographic product
Juan You · Jisuanji gongcheng yu sheji · 2012
To ensure objectivity and accuracy of the cryptographic product risk assessment,a quantitative risk assessment method based on threat analysis is proposed.According to the shortcoming of threat probability dependence on expert experience in security risk assessment method based on security threat analysis.On the basis of threat analysis and security measure classification,the method calculates the security threat available-probability and security risk value of cryptographic products by the Bayesian network,which is built on the causality between security threats and measures.Finally,the method is used to assess the security risk of HAIPE,test and verify the availability and rationality of the proposed method.