The analysis of uncertainty of network security risk assessment using Dempster-Shafer theory

A method which used Dempster-Shafer theory was introduced to handle the uncertainty of the network security risk assessment. Firstly, the index system of network security risk assessment was established. Secondly, the improved Dempster´s rule of combination was adopted to combine the risk factors of the index system. The uncertainty of the risk assessment was reduced by using Dempster-Shafer Theory. The security risk value of the network was obtained by calculation. This method was used to assess a concrete network, and the simulation result shows the correctness of the algorithm. Finally, the method was proved to be adapted to assess the network security risk assessment by the analysis of the influence of the change of single security risk factor of network to the assessment result.