A Threat Factors Analysis Method of Information System Based on Cloud Model
Xie Zanfu · Computers & Security · 2010
The threat of information system is complex and variable, and with many uncertain factors. There are some limits in the traditional estimate methods, for people usually describe the threat with qualitative linguistic words. A threat analysis method of information system based on cloud model is proposed in this paper. Mapping qualitative linguistic words of the threat estimate factors into a fine-changeable cloud drops and translating the uncertain factor conditions into quantitative values with the uncertain illation based on the cloud model, and then, the weights of vulnerability factors are mined by combining with the correlation analysis method, and the effect degrees on vulnerability are reflected objectively.The vlidity of the method is proofed to be validated through an example analysis in this paper.