摘要
资产识别是信息安全风险评估过程的首要环节,本文提出了基于层面的信息资产划分方法,同时将安全技术和管理措施引入资产的范畴提出了动态资产的概念,最后结合层次分析法AHP,对信息资产进行合理赋值。
Information property recognition is a primary link of information security risk assessment process. This article offers proposals on information property recognition method based on level systems, at the same time, brings the security technologies and the management measures into the scope of information assets, and finally draws a concept about dynamic asset. And in combination with analytic hierarchy process the information property is assigned properly.
出处
《标准科学》
CSSCI
2009年第9期64-68,共5页
Standard Science
关键词
风险评估
资产识别
资产赋值
层次分析法
risk assessment, property recognition, property evaluation, analytic hierarchy process
