删除或更新信息,请邮件至freekaoyan#163.com(#换成@)

基于关联模型的关键业务系统识别与风险评估

本站小编 Free考研考试/2021-12-21

本文二维码信息
二维码(扫一下试试看!)
基于关联模型的关键业务系统识别与风险评估
Key Business System Identification and Risk Assessment Based on Correlation Model
投稿时间:2019-10-11
DOI:10.15918/j.tbit1001-0645.2019.257
中文关键词:风险评估业务流程关联模型业务系统系统识别
English Keywords:risk assessmentbusiness processcorrelation modelbusiness systemsystem identification
基金项目:国家自然科学基金资助项目(U1833107)
作者单位
杨宏宇中国民航大学 计算机科学与技术学院, 天津 300300
秦赓中国民航大学 计算机科学与技术学院, 天津 300300
摘要点击次数:1535
全文下载次数:1907
中文摘要:
为有效识别业务流程中关键业务系统并评估其对业务流程造成的安全风险,提出一种关键业务系统识别模型.首先,通过建立业务流程关联模型得到评价属性矩阵和系统关联度矩阵;然后,改进优劣解距离法(technique for order preference by similarity to an ideal solution,TOPSIS)中的加权方法和相对接近度计算方法,利用TOPSIS的改进方法识别关键业务系统;最后,评估业务系统发生信息安全事件时业务流程面临的损失.实验结果表明,本文模型可以准确地识别业务流程中关键业务系统,并能有效地评估业务系统对业务流程造成的影响.
English Summary:
In order to effectively identify the key business system and assess its security risk on the business process, a key business system identification model was proposed. Firstly, the evaluation attribute matrix and the system association degree matrix were obtained through establishing the business process correlation model. Secondly, the weighting method and relative proximity calculation method in the technique for order preference by similarity to an ideal solution (TOPSIS) were improved, and an improved TOPSIS method was used to identify the key business system. Finally, the entire business process loss was evaluated when information security incidents occurred in the business system. Experimental results show that the model can identify the key business system accurately and evaluate the business system impact on the entire business process effectively.
查看全文查看/发表评论下载PDF阅读器
相关话题/系统 中国民航大学 天津 计算机科学与技术学院 中文