基于故障树分析的档案信息风险评估方法的研究

Research of Archives Information Risk Evaluation Method Based on Fault Tree Analysis

随着信息化的发展,档案信息系统面临着网络安全的威胁,构建基于风险评估的档案信息系统符合国家信息安全保障的政策和要求。本文提出一种档案信息风险评估方法,使用故障树分析法实现系统风险计算、采用不交化最小割集进行风险定性分析和顶事件概率分析。该方法为档案信息系统提供了一种快速、有效的定性和定量的风险评估模式。

With the development of information technology, the archival information system faced with security threats. The construction of archival information security assurance system will be accord with national information security policies and requirements. This paper presents a method based on information security risk evaluation which can achieve the system risk calculation through the use of the fault tree analysis and the use of non-intersect minimal cut set analysis to qualitative risk analysis and the top event probability. The method provides a risk assessment model which is fast and effective in the qualitative and quantitative aspects for the archival information system.