分布式信息系统风险评估研究-以安徽烟草为例  

On Risk Assessment of Distributed Information System: A Sample of Anhui Tobacco Inc.

作　　者：赵海峰[1] 虞勇勇[2] 周强[3] 周红鹃[2] 田卫东[2] 

机构地区：[1]中国联合网络通信集团有限公司安徽省分公司,安徽合肥230061 [2]合肥工业大学,安徽合肥230009 [3]安徽省烟草专卖局,安徽合肥230022

出　　处：《计算机安全》2012年第9期25-29,共5页Network & Computer Security

基　　金：安徽省烟草公司2010年度科技项目计划"安徽烟草商业信息系统风险评估及灾备方案研究"

摘　　要：对分布式信息系统所面临的主要风险进行识别和评估是构建灾备系统的首要任务。以安徽烟草分布式信息系统为例,首先分析了该信息系统在环境、管理、技术、设备等方面所存在的风险,然后以层次分析法为核心构造了评估决策模型,结合专家打分,计算出各类风险对安徽烟草信息系统的威胁程度并进行排序,从而识别出主要的风险源,为构建灾备体系提供依据。Identifying and assessing main risks of distributed information system is the first key step for constructing disaster backup and recovery system.In this paper,distributed information system of Anhui Tobacco Inc.is taken as an example to show how to analyze risks which it faces,including risks in environment,management,equipment,technology and etc.Then an assessment-making model based on Analytic Hierarchy Process is proposed.And,combined with expert scoring,severities of various risks which may menace distributed information system of Anhui Tobacco are calculated and sorted and primary risk sources are identified,which provide a good foundation for disaster backup and recovery system which will be constructed in the future.

关 键 词：分布式信息系统 灾难备份与恢复 风险评估 层次分析法 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]