基于"风险熵"的信息系统损失分析研究

针对目前已有的信息系统安全分析大多采用的各种定性分析的状况,结合"熵"学概念及应用原理,提出信息系统"风险熵"这一概念。构建数量化求解公式,从信息系统内实体资产与信息的熵值分析,旨在对信息系统遭遇风险的损失有个数量度量。

Analysis on Information System Loss Based on Risk Entropy

For the situation of the current analysis of existing information systems security are mostly used in a variety of qualitative analysis,combining the concept and application of principle of the "entropy",this thesis Proposed the concept of"risk entropy".Building the quantitative solution formula and analysing the entropy of the virtual assets and information from the information system,which can give quantitative assessment about the loss of the information system when it suffers risk.