电力信息系统动态风险评估方法研究

摘要

The information system risk assessment is used to assess the asset threat,weakness and impact of information system,and risk probability of the three items. It is the basis to implement risk management of the information system. In order to dynamically evaluate the safety of the electric power information system,the available static risk assessment algorithm was im⁃proved in combination with the impact of entity behavior on the system risk,and a dynamic risk computing method based on electric power information system is given. The theoretical analysis and results show that the improved method can enhance the reliability and timeliness of the assessment result.%信息系统风险评估是对信息系统的资产面临的威胁、存在的弱点、造成的影响，以及三者总和作用而带来风险的可能性的评估，是实施信息系统风险管理的基础。为了对电力信息系统的安全性能进行动态评价，结合实体行为对系统风险的影响，对现有的静态风险评估算法进行了改进，给出了基于电力信息系统的一种动态风险计算方法，理论分析和结果表明，改进方法提高了评估结果的可靠性和时效性。