一种基于熵权和模糊集理论的信息系统风险评估方法

针对信息系统安全风险评估的准确性问题,提出一种熵权理论与模糊集理论相结合的信息系统安全风险评估方法。该方法通过模糊集理论对信息系统所涉及的风险因素进行分析,构造各因素所对应评判集的隶属度矩阵;然后采用熵权系数法确定风险因素权重以减少主观偏差并输出信息系统安全风险等级。通过实例分析,证明该方法能较准确地量化评估信息系统风险,是一种有效、可行的评估方法。

Information System Risk Assessment Method Based on Entropy Weight and Fuzzy Set Theory

For the accuracy problem of the information system security risk assessment,proposed an information system security risk assessment method combined with entropy theory and fuzzy set theory.This paper analyzed the risk factors involved in information systems through the fuzzy set theory,constructed the membership matrix of factors corresponding to the judge set,and then used entropy weight coefficient method to determine the risk factors weight in order to reduce the subjective bias and output the information system security risk rating.By case analysis to prove that this method can more accurately quantify the assessment of information systems risk,was an effective and feasible method of assessment.