基于关联模型的关键业务系统识别与风险评估

为有效识别业务流程中关键业务系统并评估其对业务流程造成的安全风险,提出一种关键业务系统识别模型.首先,通过建立业务流程关联模型得到评价属性矩阵和系统关联度矩阵;然后,改进优劣解距离法(technique for order preference by similarity to an ideal solution,TOPSIS)中的加权方法和相对接近度计算方法,利用TOPSIS的改进方法识别关键业务系统;最后,评估业务系统发生信息安全事件时业务流程面临的损失.实验结果表明,本文模型可以准确地识别业务流程中关键业务系统,并能有效地评估业务系统对业务流程造成的影响.

Key Business System Identification and Risk Assessment Based on Correlation Model

In order to effectively identify the key business system and assess its security risk on the business process, a key business system identification model was proposed. Firstly, the evaluation attribute matrix and the system association degree matrix were obtained through establishing the business process correlation model. Secondly, the weighting method and relative proximity calculation method in the technique for order preference by similarity to an ideal solution (TOPSIS) were improved, and an improved TOPSIS method was used to identify the key business system. Finally, the entire business process loss was evaluated when information security incidents occurred in the business system. Experimental results show that the model can identify the key business system accurately and evaluate the business system impact on the entire business process effectively.