风险分析方法研究  

Risk Analysis Method Research

作　　者：郭红芳[1] 曾向阳[2] 

机构地区：[1]华南师范大学计算中心,广州510631 [2]信息产业部电子第五研究所,广州510610

出　　处：《计算机工程》2001年第3期131-132,186,共3页Computer Engineering

摘　　要：风险分析是信息系统风险管理的重要组成部分，是建立信息系统安全管理体系的重要前提．试图探讨一套可用于定性及定量风险分析的模型，即用风险树分析法对信息系统安全事件发生概率以及导致安全事件的必要条件一风险模式进行分析，进而用风险模式、影响及危害度分析法对风险模式的危害度及风险损失进行分析，最后用风险矩阵对风险作出最后的评估与决策．The risk analysis is an important component of risk management, and an important precondition of safety management system of information system. This paper attempts to research a set of models for qualitative and quantitative risk analysis, that is, analyze the probability of safety events of information system and the risk mode which is the prerequisite resulting in risk events by the risk tree analysis, then analyze the risk loss and the criticality of risk mode by RMECA; finally make risk assessment and decision by risk matrix.

关 键 词：风险树分析 风险模式 风险评估 信息系统 信息安全 计算机 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]