Failure Analysis of the Data Desensitization System for Civil Aviation Passenger Information Service Based on Bow Bayesian Network

Aiming at the uncertainty of the factors affecting the security risk assessment of civil aviation passenger information service data desensitization system and the difficulty of index quantification, a failure analysis method combining bow-tie and Bayesian is proposed and applied to the security risk assessment of civil aviation passenger information service data desensitization system. First, the business security and network security problems faced by the civil aviation passenger information service data desensitization system are analyzed in light of the composition and business characteristics of the civil aviation passenger information service data desensitization system. Second, the factors of intermediate event sub-event occurrence are analyzed, and the bow-tie model is transformed into a bow-tie-Bayesian model utilizing logical mapping to explore further the probability of occurrence of sub-events and top-level events. The experimental results show that the proposed method can effectively assess the system risk, predict the attack path, reduce the influence of subjective factors on the risk assessment process, make the assessment results more in line with the actual situation, and provide a reference and basis for the selection of security protection strategies.