基于矩阵修正方法的信息系统安全态势评估模型  

Matrix correction method based information system security assessment model

作　　者：杨宏宇[1] 张旭高 吕伟力[2] YANG Hongyu;ZHANG Xugao;LU Weili(School of Computer Science and Technology,Civil Aviation University of China.Tianjin 300300.China;Pipeline Changchun Transmission and Oil Company,China National Petroleum Corporation.Changchun 130000.China)

机构地区：[1]中国民航大学计算机科学与技术学院,天津300300 [2]中国石油天然气股份有限公司管道长春输油气分公司,长春130000

出　　处：《清华大学学报（自然科学版）》2020年第5期393-401,共9页Journal of Tsinghua University(Science and Technology)

基　　金：国家自然科学基金资助项目(U1833107).

摘　　要：针对现有信息系统安全态势评估方法准确性受专家评价偏好影响的问题,该文提出一种基于矩阵修正方法(matrix correction method, MCM)的信息系统安全态势评估模型(information system security situation assessment model, ISSSAM)。首先,在建立系统安全态势评估指标体系的基础上,修正反映指标间相对重要程度的区间判断矩阵,以提高指标层权重向量的客观性。其次,通过熵权隶属云量化计算准则层与目标层安全态势指标,并对系统的安全态势等级定级。最后,通过对国内某离港控制系统(departure control system, DCS)的评估实验,验证了本模型的有效性。实验结果表明:本模型的评估稳定性优于熵权系数法和传统层次分析法(analytic hierarchy process, AHP)。The accuracy of existing information system security assessments is affected by the expert evaluation preferences. This paper presents a matrix correction method(MCM) based on information system security situation assessment model(ISSSAM). The system uses a modified interval number judgment matrix to reflect the relative importance of various indicators to improve the objectivity of the indicator layer weight vector. Then, an entropy weight based cloud is used to quantify the criterion layer and the target layer security situation index to grade the system security level. Tests on a departure control system(DCS) verify the model validity and demonstrate that the evaluation stability of this model is better than the entropy weight coefficient method and the traditional analytic hierarchy process(AHP).

关 键 词：安全态势 指标体系 区间判断矩阵 熵权隶属云 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]