基于攻、防的信息系统安全综合评估方法的研究

从系统攻击和防护两个角度提出了一种对信息系统进行综合评估的模型。攻击方面,采用了CVE标准,通过关联规则算法和漏洞关联网络模型,实现了对系统漏洞威胁度的定量评估。防护方面,以 GB/T22239-2008作为评估依据,提出“信息”为信息系统的最小单位,利用层次分析法和三维评估模型,通过信息性和安全性对信息系统进行定制化的安全防护评估,简化了信息系统资产的评估。综合评估模型基于攻、防的评估结果,实现了系统综合安全定量分析、系统漏洞关联危害分析和安全防护短板分析。最后运用此模型对某学校信息系统进行评估,实例结果表明,基于信息系统攻、防的综合安全评估模型实现了对信息系统安全客观、科学、全面的量化评估。     

Suitability evaluation of urban construction land based on geo-environmental factors of Hangzhou, China

Suitability evaluation of urban construction land based on geo-environmental factors is the process of determining the fitness of a given tract of land for construction. This process involves a consideration of the geomorphology, geology, engineering geology, geological hazards, and other geological factors and is the basis of urban construction land planning and management. With the support of Geographic Information Systems (GIS), grid analysis, and geo-spatial analysis techniques, four factor groups comprising nine separate subfactors of geo-environmental attributes were selected to be used in the evaluation of the suitability level for construction land in Hangzhou. This was based on K-means clustering and back-propagation (BP) neural network methods due to their advantages in fast computing, unique adaptive capacity, and self-organization. Simultaneously, the evaluation results based on K-means clustering and BP neural network were compared and analyzed, and the accuracy evaluation was set. The results showed that the geo-environmental suitability evaluation results of construction land based on K-means clustering and BP neural network were similar in terms of the distribution and scale of construction land suitability level. At the same time, the results of the two evaluation methods were consistent with the variability in suitability level, engineering geology, and hydrogeology of Hangzhou. The results also showed that the real advantage of the methods proposed in this paper lies in their capacity to streamline the mapping process and to ensure that the results are consistent throughout. The suitability level of the urban construction land based on the geo-environment in Hangzhou was divided into four construction sites: land for building super high-rise and high-rise buildings, land for building multistorey buildings, land for low-rise buildings, and nonbuilding land. The results of the suitability evaluation for each category will provide a scientific basis for decision-making in urban development in Hangzhou.     

A novel fuzzy multi-criteria decision framework for sustainable supplier selection with incomplete information

Both academic and corporate interest in sustainable supply chains has increased in recent years. Supplier selection process is one of the key operational tasks for sustainable supply chain management. This paper examines the problem of identifying an effective model based on sustainability principles for supplier selection operations in supply chains. Due to its multi-criteria nature, the sustainable supplier evaluation process requires an appropriate multi-criteria analysis and solution approach. The approach should also consider that decision makers might face situations such as time pressure, lack of expertise in related issue, etc., during the evaluation process. The paper develops a novel approach based on fuzzy analytic network process within multi-person decision-making schema under incomplete preference relations. The method not only makes sufficient evaluations using the provided preference information, but also maintains the consistency level of the evaluations. Finally, the paper analyzes the sustainability of a number of suppliers in a real-life problem to demonstrate the validity of the proposed evaluation model.     

教学软件的模糊多层次综合评价

由于影响教学软件质量的因素很多,因而对它的评价困难较大.文章提出了采用模糊多层次综合评价方法对教学软件质量进行评价,并讨论了利用层次分析法来确定各评价因素的权重.     

与判断矩阵一致性无关的单准则排序法

通过“标度变换”把不具“可加性”的比例标度转化为评分标度,利用评分标度的“可加性”可计算比较对象的得分、并按得分率对比较对象排序.与已有单准则排序方法的实质性区别是,勿需进行一致性检验.     

基于AHP和模糊评价的研发人员绩效考核研究

研发人员的工作绩效不同于一般职能部门工作绩效,在对其考核时也不能与其他人员共用一套考核标准,如何准确衡量研发人员的绩效已经成为企业的一大难题。文章综合考虑了研发人员的工作特点,从德能勤绩等方面进行指标设计,并用层析分析法进行指标权重赋值,用模糊评价法构建了绩效考核模型。最后案例研究论证了绩效模型的实用性和可行性。     

基于解析法的裁剪PDE曲面的生成技术

为解决基于偏微分方程的曲面裁剪问题,研究一种广泛应用于偏微分方程曲面的裁剪方法.首先介绍基于偏微分方程的曲面生成方法,其次由参数域内的曲线在曲面上的投影,得到所求裁剪曲面的边界,然后利用解析法求得裁剪后的PDE曲面,最后列举一系列的实例来说明该裁剪方法的应用并且专门研究多个裁剪区域的问题.     

基于可拓理论的网络安全评估研究

针对目前网络安全评估算法存在的不足,提出了一种基于可拓模糊层次分析的安全评估算法。该算法在模糊层次分析法的基础上,结合可拓理论,将调查问卷表收集到的指标值映射到可拓区间中,通过相对隶属度的计算,构建了新的判决矩阵,利用模糊层次分析法计算各指标的综合权重。通过对相对隶属度的加权排序,得到网络安全评估值。通过实例分析,说明该方法能综合考虑专家打分的权威性和调查问卷的普遍性,提高了网络安全评估的准确性和有效性。     

基于层次分析法和信息熵的多准则指标选取

在新装备测试指标选取过程中,由于列装时间短,测试样本少,测试条件不足,通常选取工作无据可依。通过分析层次分析法、Dijkstra法、粗糙集法的优缺点,提出一种基于层次分析法、群组G1法和信息熵理论的指标多准则选取方法,将指标按几个基本准则两两比较获得原始数据,用群组G1法通过专家评判和信息熵法分析原始数据来确定评价准则的权值,最后对原始数据进行加权来对指标进行权重判断。文章结尾给出一个实际算例。方法依赖于两两比较数据,具有一定客观性,且无需进行样本测试,简化了指标选取工作。     

融入木桶原理的综合评估

随着人们对信息系统安全的关注，各种评估方法开始逐渐应用于安全评估领域，其中也包括了“加权平均评估法”这一常见的综合评估算法。文章对该算法在信息安全评估领域的应用情况进行了深入研究，发现它难以体现信息安全领域普遍适用的“木桶原理”。因此，文章随后对该算法作了适当的改进，使之融入了木桶原理，从而使其更适用于对信息系统安全的评估。