Network Security Architecture Based on Vulnerability Evaluation

In this paper, after discussing the problems existed in the field of computer network security architecture, it is pointed out that vulnerabilities in the network system are the main factors from which the attacks result, and a model of network security architecture based on vulnerabilities evaluation (NSAonVE) is proposed. The NSAonVE researched the entities, the vulnerabilities of the entities and their characteristics and relations, and the concept of network security architecture used in this paper is defined. It is proved also that the network system can achieve the relative security status through reconstructing network topology. The NSAonVE is described in algebra method.