两种自构函数对信息安全资产价值评估的影响

Influence of Two Kinds of Self-organization Function for Assessment of Information Security Asset Value

在信息安全风险评估的过程中,资产的价值是由资产的机密性、完整性和可用性3个安全属性来决定的。因而,在给资产进行赋值的时候必需考虑这3个因素。资产的价值是这3个因素的函数,具体的函数关系可以由评估者自行决定。本文讨论两种常用的函数关系对信息安全资产价值的影响。

In the process of information security risk assessment, the value of assets is decided by the three security attributes： asset confidentiality, integrity and availability. So we must consider these three factors when we assign the value to assets. The value of the assets is a function of the three factors, and the specific function relation can be made decisions by the assessor. This paper discusses the impact of two kinds of commonly used function relationship of information security assets value.