单调指标空间在信息系统风险评估中的应用研究

Application research of monotonic index space in information system risk evaluation

针对当前指标分析方法在整体性质分析方面的不足,利用样本点的拟合函数,提出了一种系统的单调指标空间分析模型MISAM,定义了指标的灵敏度和关联度。在该模型基础上,提出了一种基于多级灵敏度的指标权重分配方法和风险评估方法,定义了信息系统风险状态的需求满足度,用于度量当前的系统安全状态与评估者所需要的系统安全状态之间的差距,仿真实验验证了模型和方法的有效性。

Aiming at the lack of overall properties analysis,we propose a Monotonic Index Space Analysis Model（MISAM）and the sensitivity degree and correlation degree are analyzed based on this model.An index weight distribution method is proposed based on multistage sensitivity,a risk evaluation method is built,and the demand meeting degree is defined to measure the gap between the current system security state and assessor＇s demand.The simulation results prove the effectiveness of the proposed model and methods.