一种信息安全风险评估可视化模型

随着信息安全风险因素和控制措施之间关联性的不断增长，传统的风险分析方式显现出了一定的弊端。面对这些变化，日渐成熟的可视化技术为风险分析提供了一个新的思路。提出一种信息安全风险评估可视化模型，实现对风险评估中过程数据和结果数据的可视化，并且提供多种风险评估算法，在帮助研究人员处理大量数据的同时，提高风险评估的客观性和有效性，为信息安全风险评估可视化的研究提供了一个新方向。

A Visualized Model of Information Security Risk Assessment

With the growth of correlation between risk factors and control measures, there exist some draw-backs in traditional risk analysis approaches. With these changes, the maturing visualization may provide a new concept of risk analysis. This paper proposes a visualized model for the information security risk as-sessment, thus to realize the visualization of process data and result data in risk analysis. In addition, this paper also proposes a variety of risk assessment algorithms, those could help the risk assessment staff deal with large-scale data and improve the objectivity and effectiveness of risk assessment,and provide a new direction for the study of visualization for information security risk assessment.