基于风险事件分类的信息系统评估模型研究  

Risk assessment model for information system based on classification of risk events

作　　者：李廷元[1,2] 范成瑜[1] 秦志光[1] 刘晓东[2] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都610054 [2]中国民用航空飞行学院计算机学院,四川广汉618307

出　　处：《计算机应用》2009年第10期2806-2808,共3页journal of Computer Applications

基　　金：民航局科研基地863项目(2007kf003)

摘　　要：提出了一种基于风险事件分类的信息系统评估模型。模型将信息系统的单个风险事件按底层评估指标进行分类,得到底层指标风险值,然后按照评估指标的层次结构由下往上进行计算,并最终得到信息系统的综合风险值。最后,利用模糊综合评判法,在提出的模型上对一个信息系统进行评估,并得出评估结论。A risk assessment model based on classification of risk events was proposed in this paper. In this model, each single risk event was classified into one of the bottom targets. Then the value of the bottom targets could be computed out. According to the target hierarchy, the risk value of an information system could thus be computed out. Finally, the fuzzy integrated assessment method was used in the proposed model to assess a system and get the risk value.

关 键 词：信息系统 信息安全 风险评估 风险事件分类 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]