信息系统安全工程可靠性的风险评估方法

论述了一种能够运用于信息系统(IS)安全风险评估的模型与方法，这种评估方法是针对信息系统方案设计阶段的风险评估提出的，首先，对IS进行结构系统级的建模；其次，在设计层面上，从系统复杂度和系统功能故障产生后果的严重程度两方面定义了信息系统的风险指标；最后，提出了一种仿真方向，即利用马可模型定量地计算并分析信息系统在不同情形下的风险指标。

Risk Assessment Model of Reliability for Information System

We present a risk assessment model which can be used in the design phase of the information system life cycle. For each component or subsystem or and each in information system architecture, a risk factor is obtained and the severity is assessed based on hazard analysis. The risk factors in cases and the overall system risk factors are estimated using the scenarios risk factors. Finally, a Markov model is intended to set up the simulative scenarios risk factors. Within our model, we also identify critical components or subsystem and links that would require careful analysis, design, implementation, and more testing effort.