Risk Assessment Approach for Information Security Based on FAHP

doi:10.3969/j.issn.1000-3428.2009.15.054

Computer Engineering ›› 2009, Vol. 35 ›› Issue (15): 156-158.

• Security Technology • Previous Articles Next Articles

Risk Assessment Approach for Information Security Based on FAHP

QIN Da-li1,3, ZHANG Li2, LI Ji-hui2

(1. College of Mechanical and Auto Engineering, Hunan University, Changsha 410082; 2. Research Office of System Hidden Fault, China Information Technology Security Evaluation Center, Beijing 100089; 3. College of Information Science and Technology, Hunan Agricultural University, Changsha 410128)

Received:1900-01-01 Revised:1900-01-01 Online:2009-08-05 Published:2009-08-05

基于FAHP的信息安全风险评估方法

秦大力1,3，张利2，李吉慧2

(1. 湖南大学机械与汽车工程学院，长沙 410082；2. 中国信息安全产品测评认证中心系统隐患研究实验室，北京 100089； 3. 湖南农业大学信息科学技术学院，长沙 410128)

Abstract

Abstract: A model of risk assessment based on Fuzzy-AHP(FAHP) is introduced to the estimation of the information security. The important degree of each risk factor is judged in the aspects of the subjective assessment and tools inspection. By utilizing fuzzy preference programming method, the risk value of each factor is calculated. Next the quantitative risk degree of the target system is calculated, and the veracity of risk assessment is improved. The study case of the assets value shows that the model can be easily used to the risk assessment of the information security, and the results are in accord with the reality.

Key words: risk assessment, Fuzzy-AHP(FAHP), information security

摘要： 提出基于模糊层次分析法的信息安全风险综合评估模型，从主观评测和工具检测两方面对各个风险因素分别评价其重要程度。利用模糊偏好法求出各个风险因素在系统风险评估中的优先级排序，给出目标系统在不同安全侧面上的量化风险，增强评估准确性。实例分析表明，该模型可方便地应用于信息安全风险评估，具有实用性。

关键词: 风险评估, 模糊层次分析法, 信息安全

CLC Number:

TP309

QIN Da-li; ZHANG Li; LI Ji-hui. Risk Assessment Approach for Information Security Based on FAHP[J]. Computer Engineering, 2009, 35(15): 156-158.

秦大力;张利;李吉慧. 基于FAHP的信息安全风险评估方法[J]. 计算机工程, 2009, 35(15): 156-158.

/ Recommend / Download Citations

URL:

https://www.ecice06.com/EN/Y2009/V35/I15/156

[1]	RAN Lingqin, PENG Changgen, XU Dequan, WU Ningbo. Privacy Disclosure Risk Assessment Method Based on Blockchain Technology Architecture [J]. Computer Engineering, 2023, 49(1): 146-153.
[2]	ZHANG Liang, LIU Baixiang. Survey on Integrated Technology of Blockchain and Secret Sharing [J]. Computer Engineering, 2022, 48(8): 1-11.
[3]	CHEN Ruyu, DAI Huan, GAO Yujian, FU Baochuan, CHEN Jie. Electronic Degree Certificate Data Protection and Sharing Method Based on Blockchain [J]. Computer Engineering, 2022, 48(4): 50-60,80.
[4]	WANG Saie, LIU Caixia, LIU Shuxin, BAI Yi. A Method of 4G Network Security Risk Assessment Based on Attack Tree [J]. Computer Engineering, 2021, 47(3): 139-146,154.
[5]	WANG Shengwei, ZHANG Chang, ZHANG Yue, LOU Tianlong, XUE Feiyang. Design of WebGIS System for Watershed Heavy Metal Ecological Risk Assessment [J]. Computer Engineering, 2020, 46(4): 279-286.
[6]	ZHOU Neng, ZHANG Minqing, LIN Wenbing. Separable Reversible Information Hiding Algorithm in Encrypted Domain Based on Secret Sharing [J]. Computer Engineering, 2020, 46(10): 112-119.
[7]	XU Shuo, TANG Zuoqi, WANG Xin. Information Security Risk Assessment Based on D-AHP and Grey Theory [J]. Computer Engineering, 2019, 45(7): 194-202.
[8]	TAN Yuesheng,LU Liming,WANG Jingyu. Ciphertext Policy Encryption Scheme Based on Secure Three-party Computation [J]. Computer Engineering, 2019, 45(1): 115-120,128.
[9]	DU Yuanzhi,DU Xuehui,YANG Zhi. Attribute-based Encryption Information Flow Control and Implementation in Cloud Computing Environment [J]. Computer Engineering, 2018, 44(3): 27-36.
[10]	ZHOU Chao,PAN Ping,HUANG Liang. Risk Assessment of Information Security Based on Quantum Gate Circuit Neural Networks [J]. Computer Engineering, 2018, 44(12): 39-45.
[11]	HUANG Yujie,TANG Zuoqi,LIANG Jing. Information Security Risk Assessment Based on Information Entropy and Three-parameter Interval [J]. Computer Engineering, 2018, 44(12): 178-183.
[12]	JIAN Chunfu,XIE Jihua,JIN Junhua. Research and Application of Cloud Digital Signature Technology [J]. Computer Engineering, 2017, 43(12): 1-5.
[13]	CHEN Yu,WANG Yadi,WANG Jindong,WANG Na. Application Research on Fuzzy Cognitive Map in Information Security Risk Assessment [J]. Computer Engineering, 2016, 42(7): 109-116.
[14]	WANG Fengshan,RONG Quanbing,ZHANG Hongjun. Brittleness Bayesian Network Assessment Model for Defense Engineering Earthquake-damage Risk [J]. Computer Engineering, 2016, 42(4): 14-19.
[15]	YANG Qiuwei,CHENG Changquan,CHE Xiqiang. Privacy Protection for Multiple Service Requests Based on Evidence Theory in Cloud Environment [J]. Computer Engineering, 2016, 42(3): 165-171,176.

Please choose a citation manager

Content to export

Risk Assessment Approach for Information Security Based on FAHP

基于FAHP的信息安全风险评估方法

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments

模态框（Modal）标题

Please choose a citation manager

Content to export

Risk Assessment Approach for Information Security Based on FAHP

基于FAHP的信息安全风险评估方法

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments