基于信息熵与三参数区间的信息安全风险评估  

Information Security Risk Assessment Based on Information Entropy and Three-parameter Interval

作　　者：黄玉洁 唐作其[1] 梁静 HUANG Yujie;TANG Zuoqi;LIANG Jing(School of Computer Science and Technology,Guizhou University,Guiyang 550025,China)

机构地区：[1]贵州大学计算机科学与技术学院,贵阳550025

出　　处：《计算机工程》2018年第12期178-183,共6页Computer Engineering

基　　金：贵州省科技计划项目(R[2011]3111);贵州省高层次人才科研条件特助经费项目(TZJF[2010]045)

摘　　要：信息安全风险评估是一个需要处理众多模糊信息的过程,为提高信息处理的准确性,提出一种信息熵与三参数区间数相结合的信息安全风险评估方法。通过对信息系统进行分析,建立三参数区间形式的风险指标评价矩阵,采用信息熵理论确定指标权重。根据三参数区间的区间距离和区间排序理论求得评价专家权重,分析汇总三者得到最终的评估结果,并通过实例进行评估得到三参数区间数形式的风险值。实验结果表明,与采用二区间形式的方法相比,该方法能够较准确地预测风险等级。Information security risk assessment is a process that needs to deal with a lot of fuzzy information.In order to increase the accuracy of information processing,an information security risk assessment method based on three-parameter interval and information entropy is proposed.After the analysis of the information system,the evaluation matrix of the three-parameter interval of risk factors is established,and the weight of risk factors is determined according to the information entropy theory.Expert weights are obtained using the theory of interval distance and interval order.The final assessment result is obtained by aggregating three factors.An example is presented to assess risk using the proposed method.Expenmental results show that compared with the two interval,the proposed method can predict risk levels more accurately.

关 键 词：信息安全风险评估 三参数区间数 信息熵 区间距离 区间排序 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]