基于矩阵修正方法的信息系统安全态势评估模型

Matrix correction method based information system security assessment model

针对现有信息系统安全态势评估方法准确性受专家评价偏好影响的问题,该文提出一种基于矩阵修正方法(matrix correction method, MCM)的信息系统安全态势评估模型(information system security situation assessment model, ISSSAM)。首先,在建立系统安全态势评估指标体系的基础上,修正反映指标间相对重要程度的区间判断矩阵,以提高指标层权重向量的客观性。其次,通过熵权隶属云量化计算准则层与目标层安全态势指标,并对系统的安全态势等级定级。最后,通过对国内某离港控制系统(departure control system, DCS)的评估实验,验证了本模型的有效性。实验结果表明:本模型的评估稳定性优于熵权系数法和传统层次分析法(analytic hierarchy process, AHP)。

The accuracy of existing information system security assessments is affected by the expert evaluation preferences. This paper presents a matrix correction method(MCM) based on information system security situation assessment model(ISSSAM). The system uses a modified interval number judgment matrix to reflect the relative importance of various indicators to improve the objectivity of the indicator layer weight vector. Then, an entropy weight based cloud is used to quantify the criterion layer and the target layer security situation index to grade the system security level. Tests on a departure control system(DCS) verify the model validity and demonstrate that the evaluation stability of this model is better than the entropy weight coefficient method and the traditional analytic hierarchy process(AHP).