• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

计算机工程与科学

• 论文 • 上一篇    下一篇

基于改进的模糊层次分析法的信息系统安全态势评估模型

顾兆军,王蕊莉   

  1. (中国民航大学计算机科学与技术学院,天津 300300)
  • 收稿日期:2015-07-21 修回日期:2015-10-29 出版日期:2016-10-25 发布日期:2016-10-25
  • 基金资助:

    民航科技项目(MHRD20140205,MHRD20150233);2014年民航安全能力建设资金(PDSA0008);中国民航大学科研启动项目(2013QD24X)

     

A security situation assessment model of information system
based on improved fuzzy analytical hierarchy process
 

GU Zhaojun,WANG Ruili   

  1. (College of Computer,Civil Aviation University of China,Tianjin 300300,China)
  • Received:2015-07-21 Revised:2015-10-29 Online:2016-10-25 Published:2016-10-25

摘要:

对已有的安全态势评估方法进行了详细分析和比较,针对现有态势评估方法中存在的主观随机性,结合信息系统规模庞大、结构复杂、信息交互频繁等问题,依据层次分析法AHP基本原理建立了信息系统安全态势评估指标体系。针对现有的模糊层次分析法FAHP存在的一致性问题,提出了新的一致性修正算法并将其应用到了安全态势评估中。另外,吸收了模糊综合评价方法FCE计算态势值的技术,建立了一种新的安全态势评估模型—层次分析法改进的模糊层次法模糊综合评价法模型(AHPIFAHPFCE)。介绍了该模型的组成原理,给出了具体构成方法,描述了各个步骤的主要任务。实验结果表明,在信息系统安全态势评估方面,该模型比已有的模型更加有效、更加准确。

关键词: 态势评估, 模糊层次分析法, 模糊综合评价法

Abstract:

We analyze and compare several typical existing methods of security situation assessment. Aiming at subjective randomness which exists in present security situation assessment methods, and the problems of largescale, complex structure and frequent information exchange of the information system, based on the principle of analytic hierarchy process (AHP), we built an index system for the information system. Aiming at the coherence problem that exists in present fuzzy analytical hierarchy process (FAHP), we propose a new consistency modification algorithm and apply it to assessing security situation. Meanwhile, we employ the fuzzy comprehensive evaluation (FCE) method to calculate situation value, and establish a new security situation assessment model, called AHPIFAHPFCE. We describe the constitutional principles and methods, as well as the main tasks of every step. Experimental results show that the model is more effective and accurate than the existing models for security situation assessment of the information system.
 

Key words: situation assessment, fuzzy analytical hierarchy process, fuzzy comprehensive evaluation method