文献类型：期刊文献

中文题名：基于单威胁分析的高校综合信息安全风险评估方法研究

英文题名：Research on Risk Assessment Model of Universities' Information Security Based on Menace Analysis

作者：陈健[1];吉久明[1];孙济庆[1];李楠[1]

机构：[1]华东理工大学科技信息研究所,上海200237

年份：2013

卷号：32

期号：2

起止页码：169

中文期刊名：情报杂志

外文期刊名：Journal of Intelligence

收录：CSTPCD;;国家哲学社会科学学术期刊数据库;北大核心:【北大核心2011】；CSSCI:【CSSCI2012_2013】；

语种：中文

中文关键词：信息安全;风险评估模型;威胁指数;初始概率值

外文关键词：information security risk assessment model menace index initial probability value

摘要：依据资产、脆弱性、威胁等风险评估基本要素,提出一种基于Markov方法、以威胁为核心的高校信息安全风险评估模型。通过运用Markov,德尔菲集体讨论法,层次分析法等方法得到威胁发生的概率、威胁的后果属性、属性值及其权重,进而计算出威胁指数。利用威胁指数对风险进行排序,为制定有针对性的高校信息安全风险管理策略提供科学的依据。并着重对不同方法选取的初始概率值对最终结果影响进行了比较分析,发现初始概率对最终的结果影响很大。
With the rapid development of information construction in colleges and universities, information security risk assessment is im- perative. This paper presents a universities＂ information security risk assessment model based on Markov method and menace analysis. By using Markov, Delphi collective discussion and the Analytic Hierarchy Process （ AHP ）, the probability of occurrence of the threat, the property of the consequences of the threat, property values and their weights are arrived at, then menace index is calculated. The menace index is then used to rank risks involved, thus provides a scientific basis for developing appropriate information security risk management strategy in universities. And with a focus on the effects of the initial probability value selected by different methods on the final result, the comparative analysis conducted finds a significant impact on the final result by the initial probability.