基于多维云模型和熵理论的机载娱乐系统安全风险评估

中国民航大学学报 ›› 2024, Vol. 42 ›› Issue (6): 9-16.

基于多维云模型和熵理论的机载娱乐系统安全风险评估

王静 a，b ，漆书凡 c ，李国 c

中国民航大学 a. 安全科学与工程学院；b. 信息安全测评中心；c. 计算机科学与技术学院，天津 300300

收稿日期:2023-03-07 修回日期:2023-05-13 出版日期:2025-04-08 发布日期:2025-04-08
作者简介:王静（1980— ），女，山西太谷人，副教授，博士，研究方向为网络安全、智能运维、大数据民航应用
基金资助:
国家自然科学基金民航联合基金重点项目（U2033205， U2233214）；中国民航大学信息安全测评中心开放基金资助项目（ISECCA-202006）

Security risk assessment of airborne entertainment system based on

multidimensional cloud model and entropy theory

WANG Jinga,b , QI Shufanc , LI Guoc

a. College of Safety Science and Engineering; b. Information Security Evaluation Center;

c. College of Computer Science and Technology, CAUC, Tianjin 300300, China

Received:2023-03-07 Revised:2023-05-13 Online:2025-04-08 Published:2025-04-08

摘要/Abstract

摘要：

针对现有机载娱乐系统风险评估方法存在一定的不确定性、随机性和模糊性，其评估指标也具有很强的主

观性，导致评估结果不够准确和客观等问题，本文提出一种基于多维云模型和熵理论的机载娱乐系统风险

评估方法。首先使用更为全面、细粒度和客观的系统漏洞作为评估指标，并基于该指标数据生成多维云模

型图，直观展现不同风险的隶属度大小；然后结合安全事件发生的可能性及安全事件损失的可能性来计算

整个核心组件的风险值，并与风险对照表进行比较得出整个系统的风险评估结果。多次实验结果表明，本文

方法的评估结果具有更好的稳定性、准确性和客观性。

关键词:

风险评估, 云模型, 熵权法, 机载娱乐系统

Abstract:

In response to the certain uncertainty, randomness, and fuzziness of existing risk assessment methods of airborne

entertainment system, as well as the strong subjectivity of their evaluation indicators, which leads to inaccurate and

non-objective evaluation results, this paper proposes a risk assessment method of airborne entertainment system

based on multidimensional cloud model and entropy theory. Firstly, more comprehensive, fine-grained, and objective system vulnerabilities are used as evaluation indicators, and based on this indicator data, a multidimensional

cloud model graph is generated to visually display the membership degree of different risks. Then, the risk value of

the entire core component is calculated based on the probability of security events occurring and the probability of

security events losses. And compared with the risk comparison table, the risk assessment result of the entire system

is obtained. Multiple experimental results have shown that the evaluation results of the proposed method in this paper have better stability, accuracy, and objectivity.

Key words:

risk assessment, cloud model, entropy weight method, airborne entertainment system

中图分类号:

V243
TP39

王静 a, b, 漆书凡 c, 李国 c.

基于多维云模型和熵理论的机载娱乐系统安全风险评估

[J]. 中国民航大学学报, 2024, 42(6): 9-16.

WANG Jinga, b , QI Shufanc , LI Guoc.

Security risk assessment of airborne entertainment system based on

multidimensional cloud model and entropy theory

[J]. Journal of Civil Aviation University of China, 2024, 42(6): 9-16.

参考文献 20

[1]	施俞行, 黎明, 邓振. 基于以太网的民用飞机客舱网络架构设
计[J]	计算机系统应用, 2017, 26(7): 43-49.
	[2]
	CAO Q X, YAN L F, CHEN B, et al． Enhancing network security strate－
	gies against external threats to civil aircraft[C]//2016 IEEE 18th Inter－
	national Conference on High Performance Computing and Communica－
	tions, December 12 -14, 2016, Sydney, NSW, Australia． IEEE, 2016:
	110-115．
	[3]
	E 安全.全球网络安全资讯新传媒:美国国土安全部远程黑掉一架波音
	757 [EB/OL]. (2017-11-14)[2023-03-07]. https: //www.easyaq.com/news/
	1885847208.shtml.
	[4]
	LI Y, LIU J, LI G D, et al． Airborne software testing technology analysis
	based on fault injection[C]//2020 IEEE International Conference on In－
	formation Technology, Big Data and Artificial Intelligence (ICIBA), November 6-8, 2020, Chongqing, China． IEEE, 2020: 279-282．
	[5]
	AYUB S, PETRUNIN I, TSOURDOS A, et al． In-flight entertainment
	datalink analysis and simulation[C]//2020 AIAA/IEEE 39th Digital Avionics Systems Conference (DASC), October 11-15, 2020, San Antonio,
	TX, USA． IEEE, 2020: 1-10．
	[6]
	SCOTT-HAYWARD S, GARCIA-PALACIOS E． Delivering HD video
	for wireless in-flight entertainment with IEEE 802.15.3c[C]//IET Irish
	Signals and SystemsConference(ISSC2012),June 28-29, 2012, Maynooth,
	Ireland． Institution of Engineering and Technology, 2012: 1-6．
[7]	史岩, 朱佳, 范祥辉, 等．基于 ARINC822 的机载无线网络安全
	架构设计[J]．硅谷, 2014(12): 44-45．
[8]	张双, 孔德岐, 李晓东．机载系统安保风险评估方法[J]．计算机工
	程与应用, 2013, 49(16): 232-235．
[9]	李国, 李静雯, 王静, 等．基于威胁状态的新型机载网络安全风
	险评估改进模型[J]．现代电子技术, 2019, 42(2): 41-45．
[10]	吕宗平, 戚威, 顾兆军. 基于模糊层次分析法的攻击树模型[J]. 计
	算机工程与设计, 2018, 39(6): 1501-1505, 1515.
[11]	DENG X H, WANG R, XU T． Risk assessment of tunnel portals in the
	construction stage based on fuzzy analytic hierarchy process[J]． Archives
	of Civil Engineering, 2018, 64(4): 69-87．
[12]	SPANIDIS P M, ROUMPOS C, PAVLOUDAKIS F． A fuzzy-AHP methodology for planning the risk management of natural hazards in surface
	mining projects[J]． Sustainability, 2021, 13(4): 2369．
[13]	AYYILDIZ E, TASKIN GUMUS A． Pythagorean fuzzy AHP based risk
	assessment methodology for hazardous material transportation: an appli－
	cation in Istanbul[J]． Environmental Science and Pollution Research,
	2021, 28(27): 35798-35810．
[14]	WU X P, FU Y, WANG J S． Information systems security risk assess－
	ment on improved fuzzy AHP[C]//2009 ISECS International Colloquium
	on Computing, Communication, Control, and Management, August 8-9,
	2009, Sanya, China． IEEE, 2009: 365-369．
[15]	章亮, 杨俊杰．基于多维正态云模型的电力变压器状态评估[J]．
	电测与仪表, 2020, 57(4): 129-135．
[16]	付钰, 吴晓平, 叶清, 等．基于模糊集与熵权理论的信息系统安
	全风险评估研究[J]．电子学报, 2010, 38(7): 1489-1494．
[17]	赵刚, 吴天水. 结合灰色网络威胁分析的信息安全风险评估[J].
	清华大学学报(自然科学版), 2013, 53 (12): 1761-1767.
[18]	郭戎潇, 夏靖波, 董淑福, 等. 一种基于多维云模型的多属性综合评
	价方法[J]. 计算机科学, 2010, 37(11): 75-77.
[19]	Airlines Engineering Committee. Digital information transfer system
	(DITS): ARINC 429[S]. New York: Airlines Engineering Committee, 1977.
[20]	国家市场监督管理总局, 国家标准化管理委员会．信息安全技术
	信息安全风险评估方法: GB/T 20984—2022[S]．北京: 中国标准出版
	社, 2022．