【摘要】 提出一种专门针对信息系统的信息安全风险评估模型及方法,模型中将信息系统的安全保护级别分为五个等级,将模糊数学理论与BP神经网络向结合,建立对信息系统中存在的风险进行评估的方法。该方法是一种定性与定量相结合的方法,通过对信息系统中存放风险的模糊处理后再使用BP神经网络进行训练。该方法使得对信息系统的风险评估结果更加有效和准确,为信息系统的风险控制和防范做出有力数据支持。该模型在新疆某高校的教务管理系统中应用,结果表明该方法的有效性和科学性。更多还原

【Abstract】 Proposes an information security risk assessment model method which is specifically for information system.In this model,information system is divided into five security protection grades and it combines fuzzy mathematics theory with BP neural network to establish a risk assessment method for information system.This method combines the quality and quantity.After the fuzzy handling of risk exists in information system,it uses BP neural network train these results.The using of this method makes the risk assessment results more effective and accurate in information system.It gives powerful data support to risk control and precaution in information.This model is applied in educational management system of a Xinjiang University and the results demonstrate its validity and scientific.更多还原