基于组合赋权-TOPSIS方法的金融数据安全基线评价  

Baseline Evaluation of Financial Data Security Based on Combined Weighting-TOPSIS Method

作　　者：陈聪 侯建 张艳君 王逸君 Chen Cong;Hou Jian;Zhang Yanjun;Wang Yijun(Research and Development Center,Beijing Unionpay Card Technology Co.,Ltd.,Beijing 100141;Bank Card Test Center,Beijing 100141)

机构地区：[1]北京银联金卡科技有限公司研发中心,北京100141 [2]银行卡检测中心,北京100141

出　　处：《信息安全研究》2024年第7期634-641,共8页Journal of Information Security Research

摘　　要：清晰准确地识别和验证数据安全基线是开展金融数据安全保护的前提和基础,也是后续有序开展数据安全建设、数据价值利用的基准参照.因此,提出了一种基于组合赋权-TOPSIS方法的金融数据安全基线评价模型.首先,依据国家法律法规、国家及行业技术标准,分析并识别影响金融数据安全的主要因素和关键指标,建立数据安全基线体系;其次,综合运用层次分析法(AHP)与客观赋权法(CRITIC),计算出各项指标的主客观综合权重;最后,利用理想解逼近方法(TOPSIS),实现对金融数据安全基线应用效果的综合分析和合理验证.实例验证证明,该指标体系构建合理,且多维指标体系下基于组合赋权-TOPSIS方法的金融数据安全基线识别与验证模型更加科学有效,更易适配行业应用的实际情况.同时,通过与其他模型进行对比实验,进一步证明该指标体系与验证方法的正确性和有效性.The precise identification and verification of the data security baseline are fundamental prerequisites for the implementation of protective measures for financial data security.This process is a foundational reference for the subsequent systematic development of data security and the judicious utilization of data value.Therefore,this paper introduces a model for identifying and verifying the financial data security baseline based on the Combined Weighting-TOPSIS method.Initially,based on national laws and regulations,national and industry technical standards,this paper establishes a data security baseline system by analyzing and identifying the main factors and key indicators that affect financial data security.Subsequently,the Analytic Hierarchy Process(AHP)and the Criteria Importance Though Intercrieria Correlation(CRITIC)are comprehensively used to calculate the subjective and objective comprehensive weights of each indicator.Finally,through the application of the Technique for Order of Preference by Similarity to Ideal Solution(TOPSIS),a comprehensive analysis of the efficacy of the financial data security baseline is conducted,coupled with a judicious verification process.Validation through practical instances attests to the rational construction of the indicator system.Moreover,the financial data security baseline identification and verification model,grounded in the Combined Weighting-TOPSIS method and operating within a multidimensional indicator system,demonstrates superior scientific efficacy and adaptability to realworld industry applications.Comparative experiments with alternative models further underscore the accuracy and effectiveness of the proposed indicator system and verification method in this paper.

关 键 词：数据安全保护 金融数据 数据安全基线 安全基线识别与验证 AHP法 TOPSIS法 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]