摘要
对分布式信息系统所面临的主要风险进行识别和评估是构建灾备系统的首要任务。以安徽烟草分布式信息系统为例,首先分析了该信息系统在环境、管理、技术、设备等方面所存在的风险,然后以层次分析法为核心构造了评估决策模型,结合专家打分,计算出各类风险对安徽烟草信息系统的威胁程度并进行排序,从而识别出主要的风险源,为构建灾备体系提供依据。
Identifying and assessing main risks of distributed information system is the first key step for constructing disaster backup and recovery system.In this paper,distributed information system of Anhui Tobacco Inc.is taken as an example to show how to analyze risks which it faces,including risks in environment,management,equipment,technology and etc.Then an assessment-making model based on Analytic Hierarchy Process is proposed.And,combined with expert scoring,severities of various risks which may menace distributed information system of Anhui Tobacco are calculated and sorted and primary risk sources are identified,which provide a good foundation for disaster backup and recovery system which will be constructed in the future.
出处
《计算机安全》
2012年第9期25-29,共5页
Network & Computer Security
基金
安徽省烟草公司2010年度科技项目计划"安徽烟草商业信息系统风险评估及灾备方案研究"
关键词
分布式信息系统
灾难备份与恢复
风险评估
层次分析法
distributed information system
disaster backup and recovery
risk assessment
analytic hierarchy process
