基于模糊层次分析法的电动汽车充电桩信息安全风险评估方法

Information Security Risk Assessment Method for Electric Vehicle Charging Piles Based on Fuzzy Analytic Hierarchy Process

为定量评估电动汽车充电桩系统信息安全水平,发现其脆弱之处和安全隐患,基于模糊层次分析法设计电动汽车充电桩系统信息安全风险评估方案与流程;建立电动汽车充电桩系统资产安全价值层次分析模型、安全威胁层次分析模型及其评价指标体系;将电动汽车充电桩系统分为电动汽车充电桩、运营管理平台、用户资产及其之间的通信链路与通信数据,通过调研以及问卷调查的方式获得专家意见并进行量化。基于模糊层次分析法计算资产价值权重与安全威胁权重,在此基础上,计算得到各资产的风险值大小,有效识别出充电桩系统的脆弱点与安全风险,并给出安全防护措施及建议。

In order to quantitatively evaluate the information security level of the electric vehicle charging pile system and identify its vulnerability and hidden security risks,an information security risk assessment scheme and process is designed for electric vehicle charging pile system based on the fuzzy analytic hierarchy process;a security value hierarchical analysis model,a security threat hierarchic analysis model and an evaluation index system are established for the electric vehicle charging pile system assets.The assets of the electric vehicle charging pile system are divided into electric vehicle charging infrastructure pile asset,operation management platform asset,user asset and communication data asset,and they are quantified through investigation and expert opinions obtained by questionnaire surveys.The asset value weight and security threat weight are calculated based on the fuzzy analytic hierarchy process,and consequently the risk value of each asset is calculated.In this way,the fragile points and security risks of the charging pile system are effectively identified,and the corresponding security protection measures and recommendations are provided.