Application of Fuzzy Theory and Digraph Method in Security Assessment System

A model is proposed for security assessment system based on providing strategy and expert system. A system is designed under the frame of this model which can assess the security risk efficiently. In the process of development, fuzzy theory is employed to analyze the data from port scan, digraph method to analyze the data from vulnerability scan. Expert system CLIPS is used to realize the vulnerability assessment and analysis. The developed software system can adapt to the large and complex information system and can be integrated to the other information security products easily.