摘要
信息系统的风险评估是指确定在计算机系统和网络中每一种资源缺失或遭到破坏对整个系统造成的预计损失数量。脆弱性评估是安全风险评估的一个重要步骤,信息系统脆弱性评估有的部分要使用工具评估,也有的部分要靠专家来评估。运用层次分析法得出了一种比较合理的脆弱性评估模式。
In this paper, information systems risk assessment is to identify each of computer system and network resources which are missing or damaged caused to the entire system, the number of expected loss. Vulnerability assessment is an important step of risk assessment information systems, Some part of information system vulnerability assessment to rely on tool to the assessment, and the others part of rely on experts to assess. Article combines the AHP of the method to get a more reasonable vulnerability assessment model.
出处
《电脑开发与应用》
2012年第6期1-3,6,共4页
Computer Development & Applications
关键词
信息系统风险评估
脆弱性
层次分析法
标准
risk assessment of information system, vulnerability, AHP, standard