一种基于熵权和模糊集理论的信息系统风险评估方法  

Information System Risk Assessment Method Based on Entropy Weight and Fuzzy Set Theory

作　　者：付沙[1] 宋丹[1] 黄会群[1] 

机构地区：[1]湖南财政经济学院信息管理系,湖南长沙410205

出　　处：《现代情报》2013年第3期10-13,共4页Journal of Modern Information

基　　金：湖南省高等学校科学研究项目(12C0559);湖南省科技厅科技项目(2011FJ3047)

摘　　要：针对信息系统安全风险评估的准确性问题,提出一种熵权理论与模糊集理论相结合的信息系统安全风险评估方法。该方法通过模糊集理论对信息系统所涉及的风险因素进行分析,构造各因素所对应评判集的隶属度矩阵;然后采用熵权系数法确定风险因素权重以减少主观偏差并输出信息系统安全风险等级。通过实例分析,证明该方法能较准确地量化评估信息系统风险,是一种有效、可行的评估方法。For the accuracy problem of the information system security risk assessment,proposed an information system security risk assessment method combined with entropy theory and fuzzy set theory.This paper analyzed the risk factors involved in information systems through the fuzzy set theory,constructed the membership matrix of factors corresponding to the judge set,and then used entropy weight coefficient method to determine the risk factors weight in order to reduce the subjective bias and output the information system security risk rating.By case analysis to prove that this method can more accurately quantify the assessment of information systems risk,was an effective and feasible method of assessment.

关 键 词：熵权 信息系统 风险评估 模糊集合 指标权重 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]