从定性到定量的信息安全模糊综合评估

依据从定性到定量的综合集成思想,为电子政务信息安全评估提出了一种基于人-机结合数据采集的模糊综合评估方法,并提出了保障度的概念.在评估方法中,用人-机结合数据采集的方式,为Delphi方法中获取模糊矩阵时提供客观、科学的数据依据,减少了专家评判的主观性,解决了信息安全评估过程中数据采集困难、定性与定量评估不能很好结合的问题,并给出了应用实例,是一种兼具科学性、综合性和可操作性的综合评估方法.

The Fuzzy Integrated Assessment of Information Security from Qualitative to Quantitative

Using metasynthesis method,to estimate the information security of E-government,this article proposes a new method of fuzzy integrated assessment which is based on data collection through man-computer combined.And a new concept of "degree of assurance" is also presented.With this method,man-computer combined data collection provide impersonal and scientific base to evaluate fuzzy matrix in the Delphi method.It reduces the subjectivity of expert assessment,alleviates the difficulty of data collection and makes possible a better combination of qualitative and quantitative assessments.It is an integrated,rational,and scientific metasynthesis method from qualitative to quantitative.At the end of this paper,an example is shown.