摘要
为有效识别关键业务系统并评估业务系统对全业务流程造成的安全风险和影响,提出一种全业务流程关键业务系统识别模型.首先,建立业务流程关联树与业务流程关联网络,得到评价属性矩阵与系统关联度矩阵.其次,由评价属性矩阵与系统关联度矩阵构造关联评价属性矩阵,改进优劣解距离法(technique for order preference by similarity to an ideal solution,TOPSIS)中加权方法和相对接近度计算方法,基于TOPSIS改进方法计算业务系统的重要性系数,进而识别全业务流程中关键业务系统.最后,评估业务系统发生信息安全事件时对全业务流程连续性的影响.实验结果表明,该方法能够准确地识别出全业务流程中的关键业务系统,有助于高效评估业务系统对全业务流程造成的影响.
In order to effectively identify the key business system and assess the security risk and impact of business systems on the entire business process security,a key business system identification model for the entire business process is proposed.Firstly,the business process association tree and the business process association network are established,and the evaluation attribute matrix and the system association degree matrix are obtained.Secondly,the association evaluation attribute matrix is built by the evaluation attribute matrix and the system association degree matrix.And the weighting and relative proximity calculation methods of the technique for order preference by similarity to an ideal solution(TOPSIS)are improved.Then,the important coefficient of business system is calculated based on the improved TOPSIS method and the key business system is identified.Finally,the effect on the continuity of the entire business process is evaluated when information security incidents occur in the business system.Experimental results show that the method can identify the key business system accurately,and it can help to evaluate the impact of the business system on the entire business process effectively.
作者
杨宏宇
秦赓
YANG Hongyu;QIN Geng(School of Computer Science and Technology, Civil Aviation University of China, Tianjin 300300, China)
出处
《大连理工大学学报》
EI
CAS
CSCD
北大核心
2020年第3期306-316,共11页
Journal of Dalian University of Technology
基金
国家自然科学基金资助项目(U1833107)。
