Information System Security Risk Assessment Based on IDAV Multi-Criteria Decision Model
Jinning Yang, Jiazhen Han, Xiuyan Zhang · 2018
Aiming at the ambiguity, incomplete information and subjectivity in the traditional information system security risk assessment process, and the neglect of the mutual influence of evaluation indicators. Based on the intuitionistic fuzzy number (IFN), extended DEMATEL, ANP algorithm and VIKOR algorithm, an IDAV hybrid multi-criteria decision-making model is proposed. In order to effectively deal with inaccurate semantic evaluation information, the intuitionistic fuzzy set theory is used to convert expert opinions into intuitionistic fuzzy numbers. To solve the correlation problem between indicators, the DEMATEL method is used to construct the mutual influence relationship between indicators, and the recognition is made for the reason why the difference between the actual value and the expected value of the risk control index is too large; the relative weight of each index is determined by ANP method, and then the VIKOR method is used to calculate the maximum group benefit and the minimum individual regret value based on the distance calculation of IFN, and finally identify the risk indicators for maintenance. A numerical example is given and compared with the traditional method, which proves that the proposed method is more comprehensive and reasonable and effective.