SCADA系统信息安全风险评估的研究与应用

Research and Application of SCADA System Information Security Risk Assessment

在对风险评估理论研究的基础上,提出了基于改进层次分析法的SCADA系统信息安全风险评估方法。首先建立了ACADA系统信息安全风险评估层次结构模型,分为管理和技术两大类。然后针对传统层次分析法中通过两两比较法构造判断矩阵难以符合一致性要求的问题,进行了一定的改进,提出通过排序赋值法构造判断矩阵,通过改进层次分析法和熵权法计算出各评价指标权值。最后将以上方法用于对自来水厂SCADA系统信息安全风险评估。

Based on the research of risk assessment theory,an information security risk assessment method of SCADA system based on improved analytic hierarchy process is proposed.Firstly,the hierarchical structure model of information security risk assessment of ACADA system is established,which is divided into two categories of management and technology.Then,aimming at the problem that the judgment matrix constructed by paired comparison method in the traditional analytic hierarchy process is difficult to meet the consistency requirements,some improvements are made.The construction of judgment matrix by sorting assignment method is proposed,and the weight of each evaluation index is calculated by improved analytic hierarchy process and the entropy weight method.Finally,the above methods are used to evaluate the information security risk of SCADA system in waterworks.