基于改进AHP的信息安全风险评估  

Information Security Risk Assessment Based on Improved AHP

作　　者：吴开兴[1] 张坤[1] 王海江[1] 

机构地区：[1]河北工程大学信息与电气工程学院,邯郸056038

出　　处：《自动化与仪表》2016年第5期20-23,48,共5页Automation & Instrumentation

基　　金：河北省自然科学基金资助项目(D2015402159;F2015402150);河北省高等学校科学技术研究项目(ZD2014081)

摘　　要：该文从信息安全风险评估的研究现状入手,对基于AHP信息安全风险评估算法展开分析,针对判断矩阵的构造、一致性检验和风险等级的确立进行改进,通过引入结构重要度、模糊一致转换和二级模糊综合评价,有效地降低AHP在评判过程主观性和避免判断矩阵一致性检验,同时均衡所有风险因素在评估过程中的作用,得出系统的风险等级。通过实例分析证明改进后的AHP在信息安全风险评估领域更加客观,也更具实用性。In order to reduce the subjectivity of judging process and the structural complexity of the judgement matrix,taking into account the role of all the risk factors in the assessment process,this paper started with the research status of information security risk assessment,and analyzed the risk assessment model based on the AHP,proposed a risk assessment method based on the improved analytic hierarchy process.Through combining with the structure importance and fuzzy operator,established a new risk assessment model.Example analysis shows that the model has a certain practicality in the field of information security risk assessment.

关 键 词：判断矩阵 结构重要度 风险评估 一致性 模糊算子 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]