基于模糊综合的信息安全风险评估  

The Fuzzy Comprehensive Evaluation for Information Security

作　　者：黄松[1] 夏洪亚[1] 谈利群[2] 

机构地区：[1]解放军理工大学指挥自动化学院,江苏南京210007 [2]北京图形研究所,北京100089

出　　处：《计算机技术与发展》2010年第1期189-192,共4页Computer Technology and Development

基　　金：国家高技术研究发展计划(2009AA01Z402)

摘　　要：随着社会的持续发展和国家信息化步伐的加快,信息安全问题对国家安全的影响日益增加与突出。为了对安全性进行高效地评估,达到提高信息系统安全性的目的,文中提出了一种基于模糊综合评判理论的信息系统安全风险评估模型和方法。模型采用多层结构,引入了关系矩阵描述各个评价因素之间的相互影响关系,并提出了安全性评估指标体系,使用定性和定量的评估方法对安全性进行评估。对模糊综合得出的结果提出了分析方法来获得信息系统的综合风险评价,改变了传统将信息系统看成"黑盒"来评估的方法,是对以往安全性评估方法的补充。with the sustainable development of the country and the acceleration of information technology,the information security issues is highly growing.In order to efficiently evaluate the information security and improve the security, an information system security model based on fuzzy comprehensive evaluation method is proposed.The model uses multi-layer structure and elation matrix is introduced to describe the inter-relationship among judgment factors.Moreover,on the basis of calculating the influence of factors on security, qualitative evaluation of security is accomplished. At last certain method is raised to analyse the result from fuzzy judgment and draws some conclusion. The method changes the ways of generally regarding information security as ＂black- box ＂ to evaluation seeurity, and plays a role in verifying and modifying the results made by traditional models.

关 键 词：信息安全 模糊综合 评估 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]