A Method of Information Security Risk Assessment Using Fuzzy Number Operations

摘要：

After systematic analysis of risk factors of information security and assessment process, a quantitative security assessment method is presented based on fuzzy number operations. Both the fuzziness of the indices and the uncertainty of weight determination are considered. Then the grades of fuzzy language variables are given, and the opinions of multi experts are integrated to triangular fuzzy numbers. Hence, comprehensive fuzzy assessment is made by using the operation rules defined on the triangular fuzzy number. Finally, by using fuzzy number ranking method, the assessment result is defuzzified and the risk grade is determined. An illustrative example is given to show the effectiveness and validity of this method.

关键词： Information security Risk assessment Triangular fuzzy number

作者: Yu Fu Yanlin Qin Xiaoping Wu

作者单位: Department of Information Security Naval Univ.of Engineering Wuhan, China

会议类型: 国际会议

会议名称: The 4th International Conference on Wireless Communications, Networking and Mobile Computing(第四届IEEE无线通信、网络技术及移动计算国际会议)

会议地点: 大连

会议语种:英文

页码: 1-4

在线出版日期: 2008-10-12（万方平台首次上网日期，不代表论文的发表时间）