模糊综合分析在信息安全评估中的应用  

Application of Fuzzy Comprehensive Analysis to Information Security Evaluation

作　　者：付茂洺[1] 

机构地区：[1]中国民用航空飞行学院计算机学院,四川广汉618307

出　　处：《西南交通大学学报》2010年第3期440-444,共5页Journal of Southwest Jiaotong University

基　　金：国家自然科学基金资助项目(60879022/F01)

摘　　要：为了提高信息系统安全评估的准确性和有效性,减少评判者的主观差异性对评判结果的影响,提出了一种基于模糊综合分析的聚类方法.该方法对专家打分进行预处理,根据评价指标的权重大小,将分数转化为相对权重比值,再运用模糊聚类法剔除离散程度较大的差异分数.实例证明,所提出的方法使赋值区间的集中程度提高30%,评估分数的聚合性提高15%,增强了重要评估指标对评估结果的影响力.In order to improve the accuracy and validity of information system security evaluation and reduce the effects of diversities of experts＇ subjectivity on evaluation results,a clustering method based on the fuzzy comprehensive analysis was proposed.With this method,scores given by experts are pre-processed and transformed to relative weight ratios based on the weights of evaluation indexes,and after the transformation,difference scores with a large discrete degree are removed.Examples show that this clustering method makes the concentration range of valuation interval and the convergence of assessed scores be respectively increased by 30% and 15% to enhance the effect of the important evaluation indexes on evaluation results.

关 键 词：信息系统安全评估 模糊综合分析 聚类 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]