主成分分析法在信息资产安全价值识别上的应用

信息资产识别是信息安全风险评估工作的核心环节.根据信息资产的特点,按照"资产集合"的思想对信息资产进行分析,然后运用专家调研法和条件广义方差极小法从现有的信息安全风险评估指标体系中筛选出适用于被评估系统特点和主成分分析法的指标体系,最后运用主成分分析法对信息资产的安全价值进行识别、赋值.整个过程大大减少了资产属性关联性、专家的主观因素对于评估结果的影响.

Application of Principal Component Analysis in Information Assets'Security Value Identification

The information assets analysis is the key link of the information security risk assessment.The analytic process achieved through:firstly,based on information assess' characteristics,analyze the information assets according to the thought of assets set,then use the method of Delphi and conditional generalized minimum variance,filtrate the indicator system which fit the system assessed and the principal component analysis from the existing indicator system,finally,identify and evaluate the security value of the information assets by using principal component analysis.The process sharply reduces the properties' relationship of the assets and the influence form the experts' subjective factors.