基于风险权重的信息安全评估模型的研究  

Research of information secuity assessment model based on risk weights

作　　者：吕滨[1] 关双城[1] 刘晓红[1] 杨泽雪[1] 于燕飞[1] 王亚东[1] 

机构地区：[1]黑龙江工程学院计算机科学与技术系,黑龙江哈尔滨150050

出　　处：《黑龙江工程学院学报》2011年第2期55-58,共4页Journal of Heilongjiang Institute of Technology

基　　金：黑龙江省教育厅资助项目(11551402)

摘　　要：提出一种新的信息安全评估模型。该模型引入了风险权重概念,对潜在的风险因素进行分级量化,有效消除主观评价和不确定性因素对评估结果的影响。相对于已有评估模型,该模型评价指标简明清晰、评价步骤简洁规范、量化标准统一,具有良好的操作性和实用性,便于对各种信息系统进行快速评估。A new information security assessment model was proposed.By introducing the concept of risk weights and carrying on the grade quantification,the model eliminates the potential risk factors.The influence of subjective estimation and the uncertainty factor to the assessment result is eliminated effectively in the model.Comparing with other models,the assessment parameters are concise and clear;the assessment steps are succinct and normative;the quantification standard is unified.The assessment model has good operability and the usability and is advantageous to carry on more faster assessment to information system.

关 键 词：信息安全 评估模型 风险权重 风险分析 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]