基于模糊集和DS证据理论的信息安全风险评估方法

发布时间：2018-04-21 19:10

本文选题：信息安全 + 风险评估　；参考：《计算机应用研究》2017年11期

【摘要】：在信息安全风险评估过程中,存在着很多不确定和模糊的因素,针对专家评价意见的不确定性和主观性问题,提出了一种将模糊集理论与DS证据理论进行结合的风险评估方法。根据信息安全风险评估的流程和要素,建立风险评估指标体系,确定风险影响因素;通过高斯隶属度函数,求出专家对各影响因素的评价意见隶属于各个不同评价等级的程度;并将其作为DS理论所需的基本概率分配,引入基于矩阵分析和权值分配的融合算法综合多位专家的评价意见;最后结合贝叶斯网络模型的推理算法,得出被测信息系统所面临的风险大小并对其进行分析。结果显示,将模糊集理论和DS证据理论应用到传统贝叶斯网络风险评估的方法,在一定程度上能够提高评估结果的客观性。
[Abstract]:In the process of information security risk assessment, there are many uncertain and fuzzy factors. Aiming at the uncertainty and subjectivity of expert evaluation opinion, a risk assessment method combining fuzzy set theory and DS evidence theory is proposed. According to the process and elements of information security risk assessment, the index system of risk assessment is established, and the risk influencing factors are determined. It is used as the basic probability assignment for DS theory, and the fusion algorithm based on matrix analysis and weight assignment is introduced to synthesize the evaluation opinions of multiple experts. Finally, the reasoning algorithm of Bayesian network model is combined. The risk of the information system under test is obtained and analyzed. The results show that applying fuzzy set theory and DS evidence theory to the traditional Bayesian network risk assessment method can improve the objectivity of the evaluation results to some extent.
【作者单位】：桂林电子科技大学电子工程与自动化学院;中国电子技术标准化研究院;
【基金】：国家智能制造专项资助项目(京财经一指[2015]1170号) 工信部工控安全评估专项资助项目(工信软函[2015]366号) 国家科技支撑计划资助项目(2015BAK21B04) 电子发展基金资助项目(工信部财[2014]425号)
【分类号】：TP309

【相似文献】