Research On Security Evaluation Of Civil Aviation Departure Control System

Departure Control System(DCS) is a large-scale online transaction processing system for passenger service of domestics, with the functions of passenger check-in, flight control,flight load planning and others. It is critical system for passenger check- in. Once the DCS fails may cause the passengers can not board the plane, resulting in a large area of flight delays, which leads to maintain airport operations only rely on manpower in a short time,time-consuming. Therefore, DCS environment is very important for establishing a secure airport. Find and identify risks faced by DCS, and guarantee the system at a higher level of information security in a long time is a question worthy of further study. This article aims to make DCS security level assessment combined with business processes, the main works are as follows:Propose the study for DCS security assessment. Study the business and security issues of DCS, combined with detailed and accurate analysis of its business processes and system features, proposing the method for DCS security assessment.Propose asset risk value calculation model based on the degree of association of assets.This paper presents asset risk value calculation model based on the correlation of the risks.Firstly, adopt rough set attribute importance degree in determining the security propertys weight distribution of asset value. Then analysis the relationship of assets vulnerability and threat, combined with the reduction for vulnerability used of existing safety measures. Finally,determine DCS single asset risk value with the correlation between assets.Overall security level evaluation model based on fuzzy comprehensive evaluation. This paper establishes an overall security level assessment system of DCS, using multi-level fuzzy evaluation method with correlation function to obtain weighting of each index quantitatively.Then obtain risk value and risk level by establishing comprehensive fuzzy evaluation vector qualitatively and quantitatively.Design and realize the security level evaluation system of civil aviation DCS. Apply asset risk value calculation model based on the correlation of assets and overall security level evaluation model to the security assessment system, combined with information system risk assessment process and DCS-related business. It can get a reasonable assessment results and graphical representation and provide automated tools for risk assessment projects.