基于费效分析的信息安全方案决策方法  

The Decision Making Method of Information Security Scheme Based on Cost-Effectiveness Analysis

作　　者：郭威武[1,2] 陈天平[1] 郑连清[1] 吴昌银[1] 

机构地区：[1]空军工程大学电讯工程学院 [2]解放军93010部队

出　　处：《火力与指挥控制》2011年第4期43-45,共3页Fire Control & Command Control

基　　金：国家自然科学基金(60873233);陕西省科技攻关基金资助项目(2008-k04-21)

摘　　要：为了解决信息安全风险控制方案的选择问题,提出了基于费用-效能分析的方案决策方法。对风险事件的威胁场景及攻击链进行了研究,对方案的防护效果进行了分析,量化计算方案效能和费用,然后依据费效比决策准则对备选方案进行优劣排序。实例表明该方法简捷有效,增强了方案决策的科学性。The decision making method based on cost-effectiveness analysis was presented to solve the problem of the selection of information security risk control scheme.The threat scenario and attack chains of risk event was studied,the defend effect of solutions was analyzed,and quantitative computed the costeffectiveness of the scheme.Then an order of the scheme was obtained to showthe priority by the cost-effectiveness rule.The case study demonstrated the method was compact and effective,and the method can enhance the scientific of decision making.

关 键 词：风险控制 威胁场景 安全方案 费效比 

分 类 号：TP393.02[自动化与计算机技术—计算机应用技术]