一种信息安全风险评估可视化模型  

A Visualized Model of Information Security Risk Assessment

作　　者：王喆[1] 赵刚[1] 吴天水[1] 

机构地区：[1]北京信息科技大学信息管理学院,北京100192

出　　处：《通信技术》2014年第3期314-318,共5页Communications Technology

基　　金：国家"十二五"科技支撑计划课题基金资助项目(No.2012BAH08B02);北京市属高等学校高层次人才引进与培养三年行动计划(No.CIT&TCD201304117)~~

摘　　要：随着信息安全风险因素和控制措施之间关联性的不断增长,传统的风险分析方式显现出了一定的弊端。面对这些变化,日渐成熟的可视化技术为风险分析提供了一个新的思路。提出一种信息安全风险评估可视化模型,实现对风险评估中过程数据和结果数据的可视化,并且提供多种风险评估算法,在帮助研究人员处理大量数据的同时,提高风险评估的客观性和有效性,为信息安全风险评估可视化的研究提供了一个新方向。With the growth of correlation between risk factors and control measures, there exist some draw-backs in traditional risk analysis approaches. With these changes, the maturing visualization may provide a new concept of risk analysis. This paper proposes a visualized model for the information security risk as-sessment, thus to realize the visualization of process data and result data in risk analysis. In addition, this paper also proposes a variety of risk assessment algorithms, those could help the risk assessment staff deal with large-scale data and improve the objectivity and effectiveness of risk assessment,and provide a new direction for the study of visualization for information security risk assessment.

关 键 词：风险评估 可视化模型 层次分析法 交互性 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]