摘要：

信息安全风险评估是一个需要处理众多模糊信息的过程,为提高信息处理的准确性,提出一种信息熵与三参数区间数相结合的信息安全风险评估方法。通过对信息系统进行分析,建立三参数区间形式的风险指标评价矩阵,采用信息熵理论确定指标权重。根据三参数区间的区间距离和区间排序理论求得评价专家权重,分析汇总三者得到最终的评估结果,并通过实例进行评估得到三参数区间数形式的风险值。实验结果表明,与采用二区间形式的方法相比,该方法能够较准确地预测风险等级。

关键词: 信息安全风险评估, 三参数区间数, 信息熵, 区间距离, 区间排序

Abstract:

Information security risk assessment is a process that needs to deal with a lot of fuzzy information.In order to increase the accuracy of information processing,an information security risk assessment method based on three-parameter interval and information entropy is proposed.After the analysis of the information system,the evaluation matrix of the three-parameter interval of risk factors is established,and the weight of risk factors is determined according to the information entropy theory.Expert weights are obtained using the theory of interval distance and interval order.The final assessment result is obtained by aggregating three factors.An example is presented to assess risk using the proposed method.Expenmental results show that compared with the two interval,the proposed method can predict risk levels more accurately.

Key words: information security risk assessment, three-parameter interval number, information entropy, interval distance, interval order

中图分类号: 

• TP309