多因素分层模糊综合风险评估方法的应用研究

针对电子档案信息安全指标体系中的指标属性冗余的问题,提出了基于相关分析的指标属性检测方法。该方法采用量化指标属性的原则,根据指标属性的平均值和标准差,度量指标属性间的相关性;针对信息安全风险评估准确度不高的问题,提出了多因素分层模糊综合评估模型,该算法采用了层次分析法和模糊数学理论。某单位的电子档案信息系统的实际应用结果表明,该方法能直观、有效地评估系统,评估结果与实际吻合程度较高,为信息安全风险决策提供可靠的依据。

Research on application of risk assessment approach for multi-factor hierarchical fuzzy comprehensive evaluation

According to the problem of redundant attributes for indicator system of information security based on electronic archive, an attributes detection method based on correlation analysis is presented. The proposed algorithm exploits the principles of the quantified indicators properties, and the correlation between the indicators properties according to mean and standard deviation of indicators properties is measured; aiming at the problem of the low accuracy on risk assessment of information security , multi-factor hierarchical fuzzy comprehensive evaluation model based on AHP and fuzzy mathematics is proposed. The practical application on a certain information system proves that it can assess the system directly and effectively, and the assessment result is to actual with higher degree ,and it can provide reliable basis for decision making of risk about information security.