一种基于风险矩阵法的信息安全风险评估模型  

Risk assessment model of information security based on risk matrix

作　　者：张弢[1] 慕德俊[1] 任帅[1] 姚磊[1] 

机构地区：[1]西北工业大学自动化学院,西安710072

出　　处：《计算机工程与应用》2010年第5期93-95,共3页Computer Engineering and Applications

基　　金：航空科学基金(No.01F53029);国家部委基础科研资助项目

摘　　要：信息安全风险等级的评定在信息安全风险管理中至关重要,量化风险数值依旧是当前评估领域的热点。将风险矩阵法引入信息安全风险评估,构建了以专家二维矩阵、Borda排序和层次分析法为评估流程的风险评估模型,将定性的过程定量化,提高了评估的客观性。最后以校控制与网络实验室为评估对象进行实例计算。The assessment of information security risk rank is vital in information security risk management.Quantities risk rank is still a hot spot in assessment field.The risk matrix method is brought into assessment.It conceives an assessment model processed by expert 2-dimension matrix,Borda sequence and gray analytical hierarchy process.The qualitative process is quantized.It increases the objectivity of the result.Last,the control and network lab in the school is used as a study case,and its risk rank is calculated.

关 键 词：信息安全风险评估 风险矩阵 Borda序值 层次分析法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]