面向水利信息系统网络安全性评价的设计方案  

Design scheme oriented to cybersecurity evaluation of water resources information system

作　　者：贺挺[1] 周维续[1] 张怡[2] HE Ting ZHOU Weixu l ZHANG Yi(Water Resources Information Center, the Ministry of Water Resources, Beijing 100053, China Beijing Jinshui Information Technology Development Co. Ltd, Beijing 100053, China)

机构地区：[1]水利部水利信息中心,北京100053 [2]北京金水信息技术发展有限公司,北京100053

出　　处：《水利信息化》2017年第3期10-15,共6页Water Resources Informatization

摘　　要：为了综合评价水利业务系统的安全性,提出一种针对业务系统的安全性综合评价方案,该方案首先对系统健康度评价指标进行层级分类,其次应用层次分析法(AHP)获取各个指标在总评价体系中的权重,最后应用集对分析法(SPA),按照信息系统安全等级标准获取业务系统在当前时刻的安全等级值。与传统的加权平均等方法相比,可以预见,该方案可量化业务系统在安全与不安全之间的模糊部分,提供更加综合性的评价结果,为系统运维人员提供更加准确的依据。A synthetic scheme is put forward for the aim of evaluating of the security of the water resources business system. Firstly, the health evaluation indexes of the system is classified; then the Analytical Hierachical Process（AHP） method is applied to acquire the weights of the indexes; finally, the Set Pair Analysis（SPA） method is employed to get the quantified security level of the system according the predefined security level according to the standard of information system security grades. Compared to the traditional method such as weighted average method, it can be predicted that this scheme quantify the blurry parts of the system between the safe and unsafe levels. This scheme provides more synthetic evaluating results which provide more accurate foundations for the maintenance users.

关 键 词：水利信息系统 网络安全 安全性评价 评价方案 AHP法 SPA法 

分 类 号：TV39[水利工程—水工结构工程]