基于层次分析法的系统安全保护能力评价模型

摘要

Researching information system security protection problems. It is necessary to evaluate the protection ability of information system. System protection ability evaluation is a complicated process, based on the multi-level and all-round evaluation system. Evaluation index system and the establishment of weight assuring is difficult and key of scientific and reasonable evaluation system of protection ability. Combined with the actual situation, hierarchy protection is built based on the analytic hierarchy process (AHP) system to protect ability grading evaluation model.Firstly, an evaluation index system establishment method, the index weights, and index method are given to determine the score method and comprehensive ability evaluation method. Then, the model and implementation method are descriped in detail. Finally, the specific examples show that the model can objectively evaluate information system security protection status, and provides a feasible ideas and method for the system protect ability evaluation.%研究信息系统安全保护问题,需对保护能力进行评价.系统保护能力评价是依据等级保护相关标准,对系统进行多层次、全方位评价的复杂过程,评价指标体系的建立和权重的确定是科学合理评价系统保护能力的难点和关键.结合等级保护的实际情况,建立了基于层次分析法的系统保护能力分级评价模型.首先给出了评价指标体系建立方法、指标权重确定方法、指标打分方法和综合能力评价方法,然后详细描述了模型的实施方法.最后以具体的实例证明:利用模型能够客观的评价信息系统安全保护状况,为系统保护能力评价提供了一种确实可行的思路和方法.