CN103973679B - Sensor network safety assessing system based on safety level - Google Patents
Sensor network safety assessing system based on safety level Download PDFInfo
- Publication number
- CN103973679B CN103973679B CN201410177570.8A CN201410177570A CN103973679B CN 103973679 B CN103973679 B CN 103973679B CN 201410177570 A CN201410177570 A CN 201410177570A CN 103973679 B CN103973679 B CN 103973679B
- Authority
- CN
- China
- Prior art keywords
- safety
- test
- module
- safe class
- casebook
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000012360 testing method Methods 0.000 claims abstract description 164
- 238000011156 evaluation Methods 0.000 claims abstract description 44
- 238000013461 design Methods 0.000 claims abstract description 9
- 230000004044 response Effects 0.000 claims description 15
- 238000011076 safety test Methods 0.000 claims description 14
- 238000012545 processing Methods 0.000 claims description 12
- 238000010276 construction Methods 0.000 claims description 10
- 230000035945 sensitivity Effects 0.000 claims description 2
- 238000011990 functional testing Methods 0.000 claims 1
- 238000000034 method Methods 0.000 description 7
- 238000000205 computational method Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 230000006872 improvement Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000007812 deficiency Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000018109 developmental process Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000005284 excitation Effects 0.000 description 1
- 230000005094 fruit set Effects 0.000 description 1
- 101150020300 gsf2 gene Proteins 0.000 description 1
- 230000008676 import Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 238000012549 training Methods 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Abstract
The invention discloses a sensor network safety assessing system based on the safety level. The system is used for assessing safety of equipment, evaluating the safety level to which the equipment conforms and meanwhile evaluating the safety performance of the system. The system comprises an SICS design module, a safety assessment execution module and a comprehensive safety evaluation module. A testing end serves as a safety level and function equipment type selection interface, and a safety assessment server automatically generates a safety function testing suite according to the safety level and the type of the equipment and receives a result generated after the system executes testing. The server analyzes the function testing result, generates a standard consistency testing report and meanwhile generates a safety level analysis report by the combination of the function testing result and the safety level strength requirement. The assessment result of the system can reflect whether implementation of the safety function of the equipment is consistent with the standard or not, especially the level result can be compared with a level which is declared in advance, safety of the equipment is analyzed, and meanwhile a reference can be provided for improving the safety function of the equipment.
Description
Technical field
The present invention relates to Sensor Network safe practice and Sensor Network security evaluation field, specifically, it is related to a kind of being based on and pacifies
The Sensor Network security evaluation system of congruent level.
Background technology
With social development, network security increasingly causes the concern of people.The equipment pair of network is added in Sensor Network
The operation of whole network has vital impact, if non-security equipment adds network, not only affects the operation of network, also
The safety of network can be had a strong impact on, so, the safety of equipment itself must have certain requirement.Traditional security evaluation system
System is to consider safety from the overall angle of network, and the safety to online equipment itself does not do qualitatively assessment it is impossible to protect
Whether the addition of card equipment can affect the safe operation of network.If the equipment with certain safety adds network, not only may be used
To improve the safety that equipment runs, the safety of whole network also can be improved.
Therefore, a kind of Sensor Network security evaluation system based on safe class of invention, surveys from the function of equipment
The safety of the angle estimator equipment of test result and safe class, evaluation is made in the safety to system simultaneously.
Content of the invention
For deficiency of the prior art above, it is an object of the invention to provide what a kind of reduction equipment caused to system
Dangerous impact, can also improve the Sensor Network security evaluation system based on safe class of the general safety of system, the present invention
Technical scheme as follows：A kind of Sensor Network security evaluation system based on safe class, it includes：Security evaluation server and setting
It is placed in the safety test execution system at sensing network end to be measured, described security evaluation server includes SICS application solutions concordance
Statement design module and Integral safety evaluation module；
Described SICS application solutions Declaration of Consistency design module includes safe class processing module, casebook Selection Strategy
Storehouse, optional casebook and security functional testing set of modules；
Described Integral safety evaluation module includes safe class evaluation module, security functional testing interpretation of result module, peace
Full grade analysis report and consistent property analysis report；
When testing Sensor Network to be measured, safe class Grade of equipment is transferred to safe class and processes by test lead
Module and casebook Selection Strategy storehouse, device type Type of equipment is transferred to casebook Selection Strategy by another side test lead
Storehouse；Wherein said safe class processing module (2-1) is used for obtaining safety status classification elements combination according to safe class Grade
Then the safety status classification obtaining elements combination G and standard class intensity set T is sent by G and standard class intensity set T
Safe class evaluation module to Integral safety evaluation module (3)；
Be stored with described casebook Selection Strategy storehouse policy construction figure, and described casebook Selection Strategy storehouse is used for according to receipts
Safe class Grade sending to test lead and device type Type must survey case set MGSF according to policy construction figure construction,
And case set MGSF must be surveyed be sent to security functional testing set of modules；Described security functional testing set of modules is according to optional case
The case set MGSF that must survey of the optional casebook OGSF of Ji Ku and the transmission of casebook Selection Strategy storehouse constructs test cases set S,
Then test cases set S is converted into case information set B, wherein B={ M by wherein S={ MGSF+OGSF }1,M2...Mn,
And described case information set B is sent to safety test execution system (4), described safety test execution system (4) is according to case
Example information aggregate B obtains the test response sets of equipment to testing equipment, and the test response sets of equipment are transmitted to
Security functional testing interpretation of result module (3-2) is analyzed, and forms test result set N, described safe class evaluation module
The safety status classification elements combination G, the standard class intensity set T that are sent with safe class processing module and security function are surveyed
As input, corresponding relation according to security functional testing set is by case in set N for the output set N of test result analysis module
Test result corresponds to the G in set G respectivelyi, thus to GiCase result quantified and calculated test grade strength collection
Close ETi, calculate test grade strength set ET, and by safety status classification elements combination G, standard class intensity set T and
Test grade strength set ET is sent to safe class analysis report module (3-3) and generates equipment safety level report, described sets
Standby safe class report includes the test value of equipment safety grade；Described security functional testing interpretation of result module is also by test knot
Fruit set N is sent to consistent property analysis report module, represents when the test result of test result set N is 1 and tests into
Work(, then meet conformity specification, if test result is to represent test crash when 0, does not meet conformity specification.
Further, described security functional testing set of modules includes surveying casebook MGSF and optional casebook OGSF, its
In must survey casebook MGSF and include test group G0Corresponding test group G with safety status classification key element1-G10, use test cases GSF
Casebook MGSF and optional casebook OGSF, GSF must be surveyed to representnRepresent n-th test cases number, each test cases corresponds to
One test command CMDnWith test Expected Response RPn, then the corresponding information aggregate of each test cases have Mn={ GSFn,CMDn,
RPn}.
Further, described safety status classification elements combination G={ G1,G2...G10, corresponding safety status classification key element
Gi, wherein 1≤i≤10 and be integer, standard class intensity set T, T={ T1,T2...T10, TiFor safe class, safety stroke
Sub-element GiNeed the intensity meeting, 0≤Ti≤ 5, TiFor integer.
Further, described device type Type includes gateway Gateway, router Router, terminal unit End
Device,
Further, described safety status classification elements combination G includes data integrity G1, data security G2, data new
Fresh property G3, key management G4, data differentiate G5, sensitivity label G6, self contained navigation G7, forced symmetric centralization G8, user identity
Differentiate G9And node differentiates G10.
Advantages of the present invention and having the beneficial effect that：
The present invention is estimated to equipment self-security in terms of two：The realization of one side assessment equipment security function with
Consistent；On the other hand, the safe class being met from safe class angle estimator equipment.Ensure that equipment has certain peace
Quan Xing, not only can reduce the dangerous impact that equipment causes on system, can also improve the general safety of system, meanwhile, this
The test report of invention is also that the improvement of equipment provides reference frame.
Brief description
Fig. 1 is safety test system construction drawing；
Fig. 2 security functional testing noose composition；
Fig. 3 safety test system case selection policy construction figure；
Fig. 4 test system schematic diagram.
Specific embodiment
The invention will be further elaborated to provide the embodiment of an indefiniteness below in conjunction with the accompanying drawings.
Shown in reference picture 1- Fig. 4, the present invention includes SICS based on the Sensor Network security evaluation system of safe class
(Security Implementation Conformance Statement) design module, safety test execution system and comprehensive
Close security evaluation module, wherein, SICS design module and Integral safety evaluation module are performed both by security evaluation server, and pacify
Full test execution system is independent of test and appraisal server.SICS design module includes safe class processing module, security functional testing
Set of modules, optional casebook and casebook Selection Strategy storehouse.Integral safety evaluation module includes security functional testing interpretation of result
Module, safe class evaluation module, consistent property analysis report and safe class analysis report.
Table 1 safe class table
Present system according to《Sensor network information safety general technical specification》Safety requirements, by system safely point
For five grades, respectively：The first order, the second level, the third level, the fourth stage and level V, rank is higher to represent security performance more
Good, so different brackets is different to the intensity requirement of safety status classification key element, as shown in table 1.Follow above-mentioned class requirement, this
Invention system forms a kind of security functional testing set, as shown in Fig. 2 test suite includes multiple test groups, test group G1To G10With
Safety status classification key element corresponds to, test group G0For surveying casebook, other test groups are optional casebook, in order to assessment equipment
Safety with system.Wherein, GSF represents test cases, GSFnRepresent n-th test cases number, each test cases corresponds to
One test command CMDnWith test Expected Response RPn, then the corresponding information aggregate of each test cases have Mn={ GSFn,CMDn,
RPn}.
Safe class Grade that described safe class processing module is submitted to according to test lead, analyzes safety etc. under this grade
Level divides elements combination G and standard class intensity set T, and the output as this module.
Safety status classification elements combination G, G={ G1,G2...G10, corresponding to safety status classification key element G of table 1i, its
In 1≤i≤10 and be integer.
Standard class intensity set T, T={ T1,T2...T10, TiFor meeting some safe class, safety divides key element
GiNeed the intensity meeting, 0≤Ti≤ 5, TiFor integer, be given by system.By in table 1 "+" quantified it is stipulated that "+" be one
Individual unit, value is 1, and " ++ " represents 2, and by that analogy, "×" represents and is not required, and value is 0.
Before equipment carries out safety test, test lead need to state safe class and the device type of equipment under test, device type
Type includes gateway (Gateway), router (Router), terminal unit (End Device).This statement is present invention test and appraisal
The basic condition of system, is also the prerequisite of system.
Described optional casebook provides expansion interface for system, and user can increase new case information, system by test lead
The optional case providing has GSF27、GSF28、GSF29、GSF30, as shown in phantom in Figure 2, then have optional casebook OGSF=
{GSF27,GSF28,GSF29,GSF30}.Wherein, security evaluation server is equal during whole inquiry and generation test command collection
It is identified using test cases numbering, numbering comparison is as shown in table 2.
Table 2 Case No synopsis
| Numbering | Case title | Numbering | Case title | Numbering | Case title |
| GSF1 | Safety networks and recognizes | GSF11 | Divide symmetry operation | GSF21 | Mark data |
| GSF2 | Key distribution clothes | GSF12 | 32 MIC codes | GSF22 | User gradation |
| GSF3 | Key sets up clothes | GSF13 | 64 MIC codes | GSF23 | Node resource grade |
| GSF4 | Key updating takes | GSF14 | 128 MIC | GSF24 | Data resource access |
| GSF5 | Key revocation | GSF15 | Critical data passes | GSF25 | Node resource accesses |
| GSF6 | Serial number mechanism | GSF16 | All data pass | GSF26 | Differentiate user identity |
| GSF7 | Timestamp mechanism | GSF17 | All data are deposited | GSF27 | Route differentiates |
| GSF8 | XOR reflects | GSF18 | Mark network sets | GSF28 | Internet route switching |
| GSF9 | Hash operation is reflected | GSF19 | To visitor's body | GSF29 | Coordinator parsing is merged |
| GSF10 | Block cipher reflects | GSF20 | Access control list | GSF30 | Security routing data is melted |
Described casebook Selection Strategy storehouse provides for whole system and must survey casebook MGSF.Policy library according to Grade and
Type automatically selects the MGSF that case forms equipment under test, is then sent to security functional testing set of modules, the case in policy library
Example collection selection rule is as shown in Figure 3.Fig. 3 is the case selection rule based on grade being generated by table 1 and Fig. 2 training, the most throughout one's life
The casebook becoming can reflect the security performance of equipment from grade angle.The combination of each grade and device type is corresponding not
Same security function casebook, higher grade, and the intensity requirement that safety is divided with key element is higher, and required case is more.
Set MGSF and OGSF is integrated into a new test cases set S by described security functional testing set of modules,
There is S={ MGSF+OGSF }, according to the corresponding test command of each test cases and Expected Response in set, set S is converted into
Case information set B, i.e. B={ M1,M2...Mn}.
Test command equipment under test is tested in described safety test execution system parsing set B, has tested
Afterwards test response is sent to security functional testing interpretation of result module, test execution method herein is in a kind of patent " biography
Sense net safety detecting method and system ", the patent No.：201310654199.5 described in., here is omitted.
The test response sets that described security functional testing interpretation of result module exports to safety test execution system are entered
Row analysis, and form test result set N, result N is supplied to safe class evaluation module and consistent property analysis report mould
Block.Interpretation of result module mainly analyzes Expected Response and the test response of each case.If meeting test result is " successful ",
It is otherwise " failure ".Module is output as set N, N={ N1,N2...Nn, Nn={ GSFn,RTn, NnRepresent GSFnResult letter
Breath collection, RTnFor case GSFnTest result.
The realization of described consistent property analysis report module analysis security function whether with consistent, this module connects
Receive the set N of security functional testing interpretation of result module, statistics completes case and the result tested, if test result is into
Work(, then security function realize compliant, on the contrary, then do not meet.
Described safe class evaluation module is with set G, T of safe class processing module and security functional testing interpretation of result
The output set N of module, as input, calculates expectation G according to computational methodsiCorresponding test grade strength ETi.
Computational methods：Case is successfully tested and then represents that intensity level is 1, otherwise then represents that intensity level is 0, finally by GiIn every
The intensity level of one case is added, as ETi, 0≤ETi≤ 5, ETiFor integer, GiThe case comprising is filter out from N right
Answer case.
The result of grade evaluation module is imported by described safe class analysis report, compares standard of statement safe class etc.
The safe class intensity set ET of statistics after level intensity set T and test execution, calculates the meansigma methodss of strength difference, according toPoint
The reason difference in analysis intensity is simultaneously illustrated, and the safety to whole system is analyzed.
In actual test, case is all successfully tested and is difficult to, but the test crash of individual case nor say
Bright equipment does not meet this safe class, need to weigh safety status classification key element G in gradei, so flat by strength difference
AverageCome whether assessment equipment meets this safe class, formula is：
Wherein, PiRepresent GiStandard class intensity with test grade strength difference, i.e. Pi=Ti-ETi, 0≤Pi≤ 5,
PiValue be integer.
DiRepresent GiWeight coefficient, the priority of influence degree to whole network of its value and security factor and test execution
Sequentially relevant, as shown in the table：
| Gi | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
| Di | 0.3 | 0.3 | 0.2 | 0.4 | 0.1 | 0.1 | 0.2 | 0.2 | 0.2 | 0.1 |
N is the safety status classification key element number of execution test, i.e. GiAt least have the case of an executed test.With
Family can be previously set a reference threshold as the case may be,More than threshold value, illustrate that test result does not meet the safety of statement
Less than threshold value, grade, then represents that this equipment substantially conforms to the safe class stated in advance, ifValue is less, illustrates that goodness of fit is higher.
The conclusion part of report, according toSize judge whether equipment under test meets the safe class of statement, and provide survey
The case of test result failure, the safety of analysis system, and provide the user the reference frame of equipment improvement.
Below with reference to accompanying drawing, to the present invention be embodied as be described in detail.
A kind of Sensor Network security evaluation system based on safe class of the present invention, system includes SICS design module, safety
Test execution system and Integral safety evaluation module, realize security test to equipment, test system schematic diagram as indicated at 4,
Specific implementation process is as follows：
Step1：Test lead selects equipment safety grade, device type and the optional casebook of statement it is assumed that current select
Safe class Grade={ third level }, Type={ Router }, optional case be OGSF={ M27,M29}.Step2：Safety
Test and appraisal server parses to the information of Step1, Grade is sent respectively to safe class processing module and casebook is chosen
Policy library, Type is sent to casebook Selection Strategy storehouse, and OGSF is sent to security functional testing set of modules.
Safe class processing module determines safety status classification key element G of Grade={ " third level " } according to table 1i, safety
Grade classification elements combination
G={ G1,G2,G3,G4,G5,G6,G7,G8,G9,G10}
Standard class intensity set T={ T1,T2,T3,T4,T5,T6,T7,T8,T9,T10}={ 2,2,1,2,1,1,2,1,3,
2}
G and T is sent to safe class evaluation module by this module；
Step3：Casebook Selection Strategy storehouse compares policy construction figure construction according to Grade and Type and must survey case set
MGSF, MGSF={ GSF1,GSF2,GSF3,GSF6,GSF12,GSF13,GSF15,GSF16, Case No from small to large, represents and surveys
The order of examination execution.
Step4：After security functional testing set of modules receives the set MGSF in casebook selection strategy storehouse, construct case set
S,
S={ OGSF+MGSF }
Information aggregate by all cases of the corresponding information structure of each case in case set S
BB={ M1,M2,M3,M6,M12,M13,M15,M16,M27,M29}
Wherein, Mn={ GSFn,CMDn,RPn}.
Step5：The set B of Step4 is sent to test execution system by server, and system is according to the CMD excitation device in B
Execute test, and the test response after execution is fed back to the security functional testing interpretation of result module of server.
Step6：Security functional testing interpretation of result module contrasts test response and the Expected Response of each case, i.e. case
Test result RTnIt is equal to " failure " or " successful ".Build test result set N, N={ N1,N2,N3,N6,N12,N13,N15,
N16,N27,N29, Nn={ GSFn,RTn}n∈{1,2,3,6,12,13,15,16,27,29}.
Step7：Consistent property analysis report receives the set N of Step6, and N is imported consistent property analysis by server
Report, and be stored in data base, check for test lead.
Step8：Safe class evaluation module receives the case test result set N of Step6, and module receives according to Step2
Safety status classification elements combination G choose in set N expectation GiThe case that comprises simultaneously calculates corresponding test grade strength
ETi, compare Fig. 2 and understand：
Case is chosen according to set G, can directly screen out the optional case in N and be not belonging to safety status classification key element
Must survey case, directly obtain G in set GiThe case comprising.G is calculated after the completion of case selectioniCorresponding test grade strength
Set
ET={ ET1,ET2,ET3,ET4,ET5}
Calculate ETiWhen, transfer from N and belong to GiCase test result, " successful " is then worth for 1, and " failure " is then 0, so
Afterwards the value of case test result is added as GiCorresponding test grade strength ETi.
If system results are as shown in the table：
| GSF1 | Success |
| GSF2 | Success |
| GSF3 | Success |
| GSF6 | Success |
| GSF12 | Success |
| GSF13 | Failure |
| GSF15 | Success |
| GSF16 | Success |
| GSF27 | Success |
| GSF29 | Success |
Cause, wherein GSF12Test result be successfully GSF13For failure, then ET1=0+1=1,
It is similar to and can deduce：ET2=2, ET3=1, ET4=2, ET5=1
I.e.：ET={ 1,2,1,2,1 }.
Step9：Safe class analysis report receives the test grade strength set ET of Step8, safety status classification key element
Set G and standard class intensity set T, server calculates the meansigma methodss of strength difference, pass throughValue judges the knot of grade assessment
Really.
T'={ T is understood by Step21,T2,T3,T4,T5}={ 2,2,1,2,1 }, then have：
P={ P1,P2,P3,P4,P5}
={ T1-ET1,T2-ET2,T3-ET3,T4-ET4,T5-ET5}
={ 2-1,2-2,1-1,2-2,1-1 }
={ 1,0,0,0,0 }
Calculated according to formulaValue：
Wherein, n=5, has 5 G in Step8iComprise the case of at least more than one.
Safe class assessment report table format is：
Except information above, report also includes testing time, measuring unit, tested unit, statement grade, equipment under test class
Type, reference standard and assessment result.
Assume that the reference threshold that sets of user as 0.15, then has to draw a conclusion：, its value is with respect to threshold value deviation
Degree is larger, illustrates that the safe class of equipment preferably meets the class requirement of statement before test；
Step10：In conjunction with the grade assessment result of Step9, extract the case of test crash in Step6, simultaneously according to test
The safety of interpretation of result system, and import information into the data base that the conclusion part of grade assessment report is stored in server
In, check for test lead, simultaneously for the foundation of the perfect offer reference of equipment.
The above embodiment is interpreted as being merely to illustrate the present invention rather than limits the scope of the invention.?
After the content of the record having read the present invention, technical staff can make various changes or modifications to the present invention, these equivalent changes
Change and modify and equally fall into the inventive method claim limited range.
Claims (5)
1. a kind of Sensor Network security evaluation system based on safe class is it is characterised in that include：Security evaluation server (1) and
It is arranged at the safety test execution system (4) at sensing network end to be measured, it is real that described security evaluation server (1) includes SICS safety
Existing Declaration of Consistency design module (2) and Integral safety evaluation module (3)；
Described SICS application solutions Declaration of Consistency design module (2) includes safe class processing module (2-1), casebook is chosen
Policy library (2-2), optional casebook (2-3) and security functional testing set of modules (2-4)；
Described Integral safety evaluation module (3) includes safe class evaluation module (3-1), security functional testing interpretation of result module
(3-2), safe class analysis report module (3-3) and consistent property analysis report module (3-4)；
When testing Sensor Network to be measured, safe class Grade of equipment is transferred to safe class processing module by test lead
(2-1) and casebook Selection Strategy storehouse (2-2), device type Type of equipment is transferred to casebook and chooses by another side test lead
Policy library (2-2)；Wherein said safe class processing module (2-1) is drawn for obtaining safe class according to safe class Grade
Sub-element set G and standard class intensity set T, then will be strong to the safety status classification obtaining elements combination G and standard class
Degree set T is sent to the safe class evaluation module (3-1) of Integral safety evaluation module (3)；
Be stored with described casebook Selection Strategy storehouse (2-2) policy construction figure, and described casebook Selection Strategy storehouse (2-2) is used for
According to receiving safe class Grade that test lead sends and device type Type, case set must be surveyed according to policy construction figure construction
MGSF, and case set MGSF must be surveyed be sent to security functional testing set of modules (2-4)；Described security functional testing set of modules
(2-4) what the optional casebook OGSF according to optional casebook storehouse (2-3) and casebook Selection Strategy storehouse (2-2) sent must survey case
Set MGSF constructs test cases set S, wherein S={ MGSF+OGSF }, then test cases set S is converted into case letter
Breath set B, wherein B={ M1,M2...Mn, MGSF represents and must survey case set, OGSF represents optional casebook, M1,M2...MnTable
Show the case information from 1-n numbering, described case information set B is simultaneously sent to safety test execution system by optional casebook
(4), described safety test execution system (4) obtains the test response of equipment according to case information set B to testing equipment
Gather, and the test response sets of equipment are transmitted to security functional testing interpretation of result module (3-2) and be analyzed, formed and survey
Test result set N, the safety that described safe class evaluation module (3-1) module is sent with safe class processing module (2-1)
The output set N of grade classification elements combination G, standard class intensity set T and security functional testing interpretation of result module (3-2)
As input, according to the corresponding relation of security functional testing set, the test result of case in set N is corresponded in set G respectively
Gi, thus to GiCase result quantified and calculated test grade strength set ETi, and will by safety status classification
Plain set G, standard class intensity set T and test grade strength set ET are sent to safe class analysis report module (3-3)
Generate equipment safety level report, described equipment safety level report includes the test value of equipment safety grade；Described safe work(
Test result analysis module (3-2) also test result set N can be sent to consistent property analysis report module (3-4), when
The test result of test result set N is to represent when 1 to be successfully tested, then meet conformity specification, if test result is to represent when 0
Test crash, then do not meet conformity specification.
2. the Sensor Network security evaluation system based on safe class according to claim 1 it is characterised in that：Described safety
Functional test set of modules (2-4) includes surveying casebook MGSF and optional casebook OGSF, wherein must survey casebook MGSF and include
Test group G0Corresponding test group G with safety status classification key element1-G10, represented with test cases GSF and must survey casebook MGSF
With optional casebook OGSF, GSFnRepresent n-th test cases number, each test cases corresponds to a test command CMDnAnd survey
Examination Expected Response RPn, then the corresponding information aggregate of each test cases have Mn={ GSFn,CMDn,RPn}.
3. the Sensor Network security evaluation system based on safe class according to claim 1 it is characterised in that：Described safety
Grade classification elements combination G={ G1,G2...G10, corresponding safety status classification key element Gi, wherein 1≤i≤10 and be integer, mark
Quasi- grade strength set T, T={ T1,T2...T10, TiFor safe class, safety division key element GiThe intensity that needs meet, 0≤
Ti≤ 5, TiFor integer.
4. the Sensor Network security evaluation system based on safe class according to claim 1 it is characterised in that：Described equipment
Type Type includes gateway Gateway, router Router, terminal unit End Device.
5. the Sensor Network security evaluation system based on safe class according to claim 1 it is characterised in that：Described safety
Grade classification elements combination G includes data integrity G1, data security G2, data freshness G3, key management G4, data mirror
Other G5, sensitivity label G6, self contained navigation G7, forced symmetric centralization G8, user identity differentiate G9And node differentiates G10.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410177570.8A CN103973679B (en) | 2014-04-29 | 2014-04-29 | Sensor network safety assessing system based on safety level |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410177570.8A CN103973679B (en) | 2014-04-29 | 2014-04-29 | Sensor network safety assessing system based on safety level |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103973679A CN103973679A (en) | 2014-08-06 |
| CN103973679B true CN103973679B (en) | 2017-02-15 |
Family
ID=51242725
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410177570.8A Active CN103973679B (en) | 2014-04-29 | 2014-04-29 | Sensor network safety assessing system based on safety level |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103973679B (en) |
Families Citing this family (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105590056B (en) | 2014-10-22 | 2019-01-18 | 中国银联股份有限公司 | Dynamic application function control method based on environment measuring |
| CN107316056B (en) * | 2017-05-27 | 2020-04-28 | 数据通信科学技术研究所 | Automatic evaluation system and automatic evaluation method for network security level |
| CN107895118A (en) * | 2017-11-30 | 2018-04-10 | 北京北信源软件股份有限公司 | A kind of safety evaluation method of the combination of qualitative and quantitative analysis based on penetration testing |
| CN109639735B (en) * | 2019-01-24 | 2021-12-17 | 重庆邮电大学 | Method for testing safety level of IPv6 industrial wireless network |
| CN110768973A (en) * | 2019-10-17 | 2020-02-07 | 公安部第一研究所 | Signaling safety evaluation system and method based on GB35114 standard |
| CN112866186B (en) * | 2019-11-28 | 2022-01-25 | 大唐移动通信设备有限公司 | Security level determination method and device |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101951414A (en) * | 2010-10-22 | 2011-01-19 | 无锡市云感科技股份有限公司 | Information system of wireless sensing network combined with internet of things platform |
| CN102333307A (en) * | 2011-09-28 | 2012-01-25 | 北京航空航天大学 | Wireless sensor network (WSN) trust evaluation method based on subjective belief |
| CN102625312A (en) * | 2012-04-25 | 2012-08-01 | 重庆邮电大学 | Sensor network safety system based on delaminated intrusion detection |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8522341B2 (en) * | 2006-03-31 | 2013-08-27 | Sap Ag | Active intervention in service-to-device mapping for smart items |
| US8065411B2 (en) * | 2006-05-31 | 2011-11-22 | Sap Ag | System monitor for networks of nodes |
| US8527622B2 (en) * | 2007-10-12 | 2013-09-03 | Sap Ag | Fault tolerance framework for networks of nodes |
-
2014
- 2014-04-29 CN CN201410177570.8A patent/CN103973679B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101951414A (en) * | 2010-10-22 | 2011-01-19 | 无锡市云感科技股份有限公司 | Information system of wireless sensing network combined with internet of things platform |
| CN102333307A (en) * | 2011-09-28 | 2012-01-25 | 北京航空航天大学 | Wireless sensor network (WSN) trust evaluation method based on subjective belief |
| CN102625312A (en) * | 2012-04-25 | 2012-08-01 | 重庆邮电大学 | Sensor network safety system based on delaminated intrusion detection |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103973679A (en) | 2014-08-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103973679B (en) | Sensor network safety assessing system based on safety level | |
| CN104506522B (en) | vulnerability scanning method and device | |
| Jin et al. | Theseus: Incentivizing truth discovery in mobile crowd sensing systems | |
| Wooster et al. | Productivity spillovers from foreign direct investment in developing countries: A meta‐regression analysis | |
| CN110688659B (en) | Method and system for dynamically detecting horizontal override based on IAST test tool | |
| US20160277433A1 (en) | Non-harmful insertion of data mimicking computer network attacks | |
| Yin et al. | Optimal linear combinations of multiple diagnostic biomarkers based on Youden index | |
| CN110598418B (en) | Method and system for dynamically detecting vertical override based on IAST test tool | |
| Rivera et al. | Optimal detection of a jump in the intensity of a Poisson process or in a density with likelihood ratio statistics | |
| CN106778260A (en) | Attack detection method and device | |
| CN106371993B (en) | Test method and test device based on data packet | |
| CN103150250B (en) | Application program capacity detection system and application program capacity detection method | |
| CN103095728A (en) | Network security marking system based on behavioral data fusion and method | |
| CN105447388B (en) | A kind of Android malicious code detection system based on weight and method | |
| Crespo et al. | The effect on citation inequality of differences in citation practices at the web of science subject category level | |
| CN103902451A (en) | Intelligent electricity meter software quality evaluation method | |
| CN106257480A (en) | A kind of method and device preventing the robot tool malicious access page | |
| Gabriel et al. | Comparing and combining biomarkers as principal surrogates for time‐to‐event clinical endpoints | |
| CN106549959A (en) | A kind of recognition methodss of agent IP Protocol IP address and device | |
| Li et al. | A trust evaluation scheme for complex links in a social network: a link strength perspective | |
| CN105046404A (en) | Method and system for performing community inspection for market subject using applications | |
| CN104320271B (en) | A kind of network equipment safety evaluation method and device | |
| CN109218090A (en) | A kind of Internet of things node Trust Values Asses method | |
| CN103744941A (en) | Method and device for determining website evaluation result based on website attribute information | |
| CN107623924A (en) | It is a kind of to verify the method and apparatus for influenceing the related Key Performance Indicator KPI of Key Quality Indicator KQI |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20190802 Address after: 400065 Chongwen Road, Nan'an District, Chongqing, No. 2 attached to No. 1 Patentee after: Wei Min Address before: 400065 Chongqing Nan'an District huangjuezhen pass Chongwen Road No. 2 Patentee before: Chongqing University of Posts and Telecommunications |
|
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20191125 Address after: 4-4, No. 789, Jingwei Avenue, Yuzhong District, Chongqing Patentee after: Chongqing siaiwei intelligent IOT Technology Co., Ltd Address before: 400065 Chongwen Road, Nan'an District, Chongqing, No. 2 attached to No. 1 Patentee before: Wei Min |
|
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200803 Address after: 4-3, No. 789 Jingwei Avenue, Yuzhong District, Chongqing, 400010 Patentee after: Chongqing Hollysys Intelligent Technology Co.,Ltd. Address before: 4-4, No. 789, Jingwei Avenue, Yuzhong District, Chongqing Patentee before: Chongqing siaiwei intelligent IOT Technology Co.,Ltd. |
|
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20210901 Address after: 400010 4-4, No. 789, Jingwei Avenue, Yuzhong District, Chongqing Patentee after: Chongqing siaiwei intelligent IOT Technology Co.,Ltd. Address before: 400010 4-3, No. 789, Jingwei Avenue, Yuzhong District, Chongqing Patentee before: Chongqing Hollysys Intelligent Technology Co.,Ltd. |
|
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20220420 Address after: 400065 Chongwen Road, Nanshan Street, Nanan District, Chongqing Patentee after: CHONGQING University OF POSTS AND TELECOMMUNICATIONS Address before: 400010 4-4, No. 789, Jingwei Avenue, Yuzhong District, Chongqing Patentee before: Chongqing siaiwei intelligent IOT Technology Co.,Ltd. |
|
| TR01 | Transfer of patent right |