Service-based quantitative calculation of risk for NGN

Abstract

Network risk assessment is an important method to monitor and forecast the security status of the network. The risk calculation is the key step and the result is the direct reference of the risk assessment. This paper prompts a service-based risk quantitative calculation method — SRQC of NGN. SRQC method includes a service-based layered risk calculation model, the quantitative process of assets, vulnerabilities and threats and the risk calculation. The calculation model centers on the services of NGN and considers the relationship of services. The new view makes the risk analysis closer to manager. It makes the result more valuable to refer and more objective compared with the qualitative calculation.