智慧城市信息安全风险评估指标体系构建

Construction of an Indicator System for Information Security Risk Assessment of Smart City

[目的/意义]智慧城市建设过程中潜藏着众多风险与威胁,正确认识与评估这些风险是提升智慧城市信息安全保障能力的基础。[方法/过程]从风险来源视角,识别智慧城市信息安全主要风险源,通过分析指标间的相互依存关系,构建ANP结构模型,运用超级决策软件计算出指标权重。[结果/结论]构建了包括环境风险、数据风险、用户风险、管理风险在内的4个一级指标、8个二级指标、30个三级指标的智慧城市信息安全风险评估指标体系,其中管理者最需要关注的是环境风险,其次是管理风险、数据风险、用户风险,并提出智慧城市信息安全风险应对策略。

[Purpose/Significance]There are many risks and threats hidden in the process of smart city construction.Correctly understanding and evaluating these risks is the basis for improving the ability of smart city information security assurance.[Method/Process]From the perspective of risk sources,the main risk sources of smart city information security were identified,the interdependence between indicators was analyzed,an ANP structural model was built,and super decision software was used to calculate the indicator weights.[Results/Conclusion]A smart city information security risk assessment index system composing 4 first-level indicators,8 second-level indicators,and 30 third-level indicators including environmental risk,data risk,user risk,and management risk was constructed.Among them,managers need to pay the most attention to environmental risks,followed by management risks,data risks,user risks,and put forward smart city information security risk countermeasures.