基于Shapley熵和Choquet积分的层次化风险评估

Hierarchical Risk Assessment Based on Shapley Entropies and Choquet Integrals

针对评估要素关联关系的模糊性和复杂性以及属性关联性合成权重在实际评估中难以获得的特点,提出了基于Shapley熵和Choquet积分的层次化评估模型.该模型通过引入多人合作对策中的Shapley值概念,基于最大Shapley熵原理,运用逐级Choquet积分融合的层次分析法解决了贫信息条件下网络系统风险综合评估问题.某园区子网信息安全风险评估实例验证了该模型的有效性.

The existing information security risk assessment approaches commonly ignore the relations among the assessment factors. To overcome the ambiguity and complexity of relations among the factors, and the difficulty of acquiring the correlative fusion weights of attributes in practice, a hierarchical risk assessment model based on Shapley entropies and Choquet integrals is proposed. By introducing the Shapley value concept of n-person cooperative game theory into the assessment model, this approach solves the information security risk assessment problem under poor information conditions by using the analytic hierarchy process with Choquet integrals from bottom to top, which is based on the maximum Shapley entropy principle. The effectiveness of the proposed approach is illustrated via an actual information security risk assessment for four subnets of the intranet in a community.