基于评判矩阵的网络信息安全风险评估

Network Information Security Risk Assessment Based on Judgment Matrix

针对传统网络信息安全风险评估方法实用性较低的问题,笔者进行了基于评判矩阵的网络信息安全风险评估研究。笔者根据网络信息安全风险评估的原则选取了具有全面性、可比性以及稳定性等具有代表的评估指标,根据评估指标的特点建立评判矩阵,运用1-9标度法对指标权重进行求解,根据指标权重将网络信息安全风险分为5个级别,并分别构建网络信息安全风险评估函数,以此建立了基于评判矩阵的网络信息安全风险评估模型,并对网络信息安全风险进行逐层评估,经过试验验证了该模型具有良好的实用性。

In view of the low practicability of the traditional network information security risk assessment methods,the author carries out a research on the network information security risk assessment based on the evaluation matrix.According to the principle of network information security risk assessment,the author chooses representative evaluation indicators with comprehensiveness,comparability and stability,establishes evaluation matrix according to the characteristics of evaluation indicators,uses 1-9 scale method to solve the index weight,and divides the network information security risk into five levels according to the index weight.The risk assessment function of network information security is constructed separately,and then the risk assessment model of network information security based on the evaluation matrix is established,and the risk of network information security is evaluated step by step.The experiment proves that the model has good practicability.