An Approach for Information Systems Security Risk Assessment on Fuzzy Set and Entropy-Weight
Xi Peng · Dianzi xuebao · 2010
The risk factors of information systems are classified into three aspects of influence on asset,frequency of threat and severity extent of survivabulity,which are analysed based on the fuzzy set theory to describe their fuzzy-valued grades.And their membership matrices for judgement set are presented.Then the weights of the risk factors are calculated with the entropy theory to reduce the subjectivity.The approach of comprehensive eveluation is applied into integrating the respective risk assessment results of such three factors to obtain the final risk grade.Finally,an illustrative example is shown that this proposed method is effective and reliability.