中国网上银行信息系统安全管理模糊综合评估

Fuzzy Apprehensive Assessment on Internet Banking Information System Security Management in China

网上银行信息系统安全管理是网上银行信息系统平稳运转以及业务功能充分实现的根本保障,因此准确评估网上银行信息系统安全管理,对其发现、规避安全隐患和优化安全机制具有重要作用。针对中国网上银行信息系统安全管理现状,选取具有代表性的目标银行A行网上银行信息系统进行基于模糊综合模型的安全评估,发现样本行网上银行信息系统综合表现较好,但在人员安全、通信与操作安全等方面存在较大安全风险。

Information system security management of internet banking is the basic guarantee for the normal operation of internet banking information system and the implement of business function.How to estimate the internet banking information system management has important effect on discovery and elusion of the system security risk and optimization of system security mechanism.In this paper,aimed at the internet banking information management actuality of China,a representative objective internet banking A is selected to implement security estimation using fuzzy synthesized evaluation model.Results show that the sample internet banking information system behaves fine.But the sample bank information system exist rather big security risks in personnel security,communication and operation security aspect.The security estimation model proposed in this paper has some guiding significance to internet banking security estimation.