基于信息熵的安全风险评估指标权重确定方法

权重反映了各个指标在＂指标集＂中的重要性程度。基于信息熵理论,给出了一种安全风险评估指标权重的确定方法。其基本思想是：首先建立信息系统安全风险评估的熵模型,定义隶属函数,通过意见采集和专家排序,形成专家意见隶属度矩阵,然后引入平均认识度和认识盲度的概念,剔除专家在排序阶段认识上隐含的不确定性,最后经过归一化处理,得到了指标集的权向量。基于信息熵的指标权重确定方法为确定安全风险评估指标权重提供了一种新方法。

Method of Determining Index Weight in Security Risk Evaluation Based on Information Entropy

Weight reflects the essentiality of an index in index volume. Presented a method of deter- mining index weight in security risk evaluation （SRE） based on information entropy. It is a kind of struc-ture analysis method, which constituted entropy model for security risk evaluation of information system and defined subjection function in the first instance, shaped subjection degree matrix of experts＇ ideas via idea collection and expert compositor, and then introduced average cognitive degree and cognitive bind degree, eliminated experts＇ indetermination of cognition in compositor phases. In the end, gained vector quantities of weight via normalized. The method of determining index weight based on information entropy puts forward a new method to determine index weight in security risk evaluation.