现有威胁情报不能很好地适用于金融行业,而国内外安全标准也缺乏可计算性.因此,针对金融系统提出一套可量化的安全指标,成为一个重要的课题.借鉴国内外安全标准,针对金融行业提出了一套基于威胁情报的层次化安全指标体系.根据量化方法的不同,采集指标分为时间指标、频率指标、专家经验指标、正相关性指标以及趋势指标五类.之后采用专家排序法主观赋权重,并通过显著性检验客观调整权重值.最后借鉴层次分析法,将上级指标的量化通过各层指标向上聚合得到.%The existing threat intelligence cannot be well applied to the financial industry, while the domestic and foreign security standards lack computability. Therefore, it is an important issue to propose a quantifiable security index for the financial system. By referring to the security standards both at home and abroad, the hierarchical security index system based on threat intelligence for the financial industry is proposed. According to the different methods of quantification, the collected indexes may be divided into five categories including time index, frequency index, expert experience index, positive correlation index and trend index. Then, the expert ranking method is used to assign the weights subjectively, and the weights are adjusted objectively through the significance test. Finally, by referring to analytic hierarchy process (AHP), the quantification of superior indicators is aggregated and acquired through indicators of all levels.
展开▼
