基于模糊评判法的信息安全风险评估模型

论文依照风险评估的理论,提出了安全域划分的概念,并在划分的基础上提出了基于模糊综合评判法的信息安全风险评估模型。模型采用多层结构,将多因素问题简化为单因素的问题,降低了复杂度,并引入关系矩阵描述各个评价因素之间相互影响的关系,对综合评价得出的结果提出了分析方法来获得企业信息系统的综合风险评价。

Information Security Risk Evaluation Model Based on Fuzzy Judgment

Including to the theory of risk evaluation, the concept of security domain has been raised and an evaluation model of information security risk based on fuzzy comprehensive judgment is proposed in this paper. The model simpli- fied multi-factor problems to single-factor problem by using multi-hierarchy structure. Moreover, elation matrix is intro- duced to describe the inter-relationship among judgment factors. At last, certain method is raised to analyse the result from fuzzy judgment and draw some conclusion.