¹Civil Aviation University of China, College of Computer Science and Technology, 300300 Tianjin, China
²Swiss Federal Institute of Technology in Lausanne, School of Computer and Communication Science, CH-1015 Lausanne, Switzerland

---

Abstract—According to the problem in communication protocol security assessments, a new protocol security comprehensive evaluation method based on the threedimensional sphere model is presented. In this method, a three-dimensional security evaluation index system was built through positions of index on the external of spherical shell. Evaluation index weights of the top two levels were obtained through the analytic hierarchy process (AHP), with sphere radius and the retractable angles. Then, security components’ values of communication content, communication load and security vulnerability of XML communication protocol were calculated. Finally, the security evaluation result of XML communication protocol was obtained through quantization calculation and comprehensive analysis method. The experimental results demonstrate that our method can meet the needs of communication protocol security evaluating effectively.

Index Terms—Security evaluation, protocol, sphere model, three-dimensional.

[PDF]

Cite: Lixia Xie, Yanxin Yan, Jiyong Zhang, "Research on Security Evaluation of XML Communication Protocol," Journal of Software vol. 8, no. 6, pp. 1428-1435, 2013.