Evaluation and Analysis of the Quantitative Computing Model of the Information Security Risk Assessment

Abstract:

To solve the difficult quantify analysis problem in the process of information security risk assessment, on the basis of the original qualitative risk assessment method, the fuzzy analytic hierarchy process is put forward, in order to realize the organic combination of subjective and objective assessment of risk factors. Based on the improvement of the analytic hierarchy process and fuzzy evaluation method, the two methods are organically combined. On the basis of the analysis and assessment of risk probability and impact of the incident, the risk rank of each risk factor is determined, and the information system risk control suggestions are given

• Periodical: Applied Mechanics and Materials (Volumes 543-547)
• Pages: 3565-3568
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.543-547.3565
• Online since: March 2014
• Authors: Xiao Qiang Peng*, Ting Ting Lu
• Keywords: Information Security, Model, Quantitative, Risk Assessment

References

[1] Wu Yafei, Li Xinyou. Information Security Risk Evaluation[M]. Beijing: Tsinghua University Press. (2007).

[2] Yang Xiaoming, Luo Hengfeng, etc. Information Systems Security Risk Assessment Technology Analysis[J]. Journal of Computer Applications, 2008, (8): 18 to 20.

[3] Sun Qiang. Research of Quantitative Information Security Risk Assessment Calculation Model[J]. Journal of Computer Applications and Software, 2012, 29 (9): 285-288.

[4] Tang Yongli, Xu Guoai, Niu Xinxin, etc. Information Security Risk Analysis Model Based on the Information Entropy[J]. Journal of Beijing University of Posts and Telecommunications, 2008, 31 (2): 50-53.

[5] Sun Qiang. Qualitative and Quantitative Comparative Study of Information Security Risk Assessment Model[J]. Journal of Microelectronics and Computers, 2010, 27 (6): 92-95.