A Method for Information Security Risk Assessment Based on the Dynamic Bayesian Network

With the increasing complexity and diversity of information systems, more and more researchers gradually pay attention to the real-time dynamic risk assessment. In this paper, we introduce a method for information security risk assessment based on the dynamic Bayesian network. Firstly, we create a dynamic Bayesian network model based on the risk assessment process. Secondly, according to Bayesian theory and inference procedure, we analyze an information system and calculate the probability of the risk. Finally, in order to verify the validity and accuracy of the dynamic assessment model, we make an experiment to compare the dynamic Bayesian network model with the static Bayesian network model.