模糊综合评判法在医院信息系统安全风险评估的应用  

Application of Fuzzy Comprehensive Evaluation Method in the Security of HIS

作　　者：李小华[1] 易传亮[1] 李广曦[1] 

机构地区：[1]广东省中医院信息部,广东广州510120

出　　处：《医学信息》2008年第2期166-169,共4页Journal of Medical Information

基　　金：广东省科学技术厅社会发展攻关项目资助课题编号(C10115)

摘　　要：引入信息系统安全风险评估,提出一种基于模糊综合评判理论的信息系统安全风险评估模型和方法,定量计算信息系统的安全风险值,为医院信息管理部门采取相应的管理措施与防护措施提供理论根据,提高医院信息系统的安全性。本文采用基于模糊综合评判法对信息系统安全风险评估模型进行评估,定量计算医院信息系统的服务器组件的安全风险值。将其应用于实际的信息系统安全风险评估中,表明这种方法具有重要的实用性和应用前景。An information system safety risk model based on fuzzy comprehensive evaluation method is proposed to offer theoretical basis of mangement measures and protective measures which were taken by the hospital IS department and improve the security of the HIS. Evalute the IS safety risk model adopting fuzzy comprehensive evaluation method, quantitatively caculate safety risk value of server component in HIS. This method is able to be introduced to safty risk evalution of IS. It indicates that it is of great practicability and application prospect.

关 键 词：信息安全 安全风险评估 模糊综合评判 医院 

分 类 号：R197.324[医药卫生—卫生事业管理]