基于区间数和理想解的信息安全风险评估研究

Research on information security risk assessment based on interval number and TOPSIS

在信息安全风险评估的过程中需要收集多位专家的评估意见作为基础数据,为了更准确地提取专家意见中包含的信息,对基于区间数模糊综合评判的风险评估模型提出了一种改进方案。该方案建立了一种新的评判矩阵形式,为专家提供了更大的表达意见的空间,同时保留给出评估意见的每一位专家的信息,使意见与其出处可以一一对应。然后通过逼近理想解法计算每位专家所给意见的准确度,经过汇总以得到更合理的评判结果,最后对一个实际的系统进行了实例计算,验证了该方法的可行性和合理性。

The evaluation opinions from several experts should be collected as the basic data in the process of information sys- tem risk assessment. In order to more accurately extract the information contained in the experts＇ opinion, this paper proposed an improved comprehensive evaluation model based on interval number. The model established a new form of evaluation matrix to provide more space for experts to express their opinions, and the matrix could keep every expert＇ s information which was of- ten omitted. Then it calculated the accuracy of each expert＇ s opinion by using TOPSIS method. It made the comprehensive e- valuation results more reasonable. At last, it calculated the evaluation process of a practical system as an example. And the result proves the feasibility and rationality of the method.