一种基于层次模型的网络信息安全风险灰色评估方法

网络信息安全风险评估就是根据有关的信息安全测评标准,对信息资产存在的脆弱性、面临的威胁以及脆弱性被威胁利用会产生的负面影响和危害事件发生的可能性,进行科学评价的过程。运用灰色评估方法,建立信息系统风险多层灰色评估模型,描述了信息系统的风险灰色综合评估过程,并且通过某学院校园网络系统加以实施和验证。

A Method of Network Information Security Evaluation Based on Gray Assessment And Hierachical Model

Information security risk assessment is accorde to relational evaluating standards.The procedure of evaluating the vulnerability and the threat of information asset,along with the negative impact and the likelihood of harmful things are presented.The evaluation index system for information system risk is build,and used the multilevel the grey comprehensive evaluation method to quantify the risk.Through analysising one college's system network,the actual information security risk assessment project are imple...