Index System of Network Security and Survivability

In order to set up universal criteria for measuring and evaluating network security and survivability, this paper presents a novel index system. This index system was built according to the Protection-Detection-Response (PDR) security model and the Resistance-Recognition-Recovery (R3) survivability principle of network in the presence of attacks, failures, or accidents. And all the 24 metrics in the index system are used to cover the characters of network security and survivability. The index system is organized with three-layer structure like a tree. The first layer, i.e. root node, is called network security and survivability. The second layer includes three indexes, i.e. resistance metric, awareness metric, and recovery metric. The third layer includes 20 indexes abstracted from different network layers, survivability characters, and survivability methods and so on. This novel index system is quantifiable, universal, consistent, compatible, and fine-scale, which is suitable for different network systems. At last, a case for how to using these index system to measure network security and survivability is also given.