文档介绍：Computer Engineering and Applications 计算机工程与应用 2010,46(22) 103
信息安全风险控制的PROMETHEE决策方法研究
吕俊杰 1,董红 2
LV Jun-jie1,DONG Hong2
,北京 100037
,北京 100840
Technology and Business University,School of Business,Beijing 100037,China
Management Department,China Nuclear Power Engineering Co.,Ltd,Beijing 100840,China
E-mail:******@.
LV Jun-jie,DONG security risk control model based on PROMETHEE puter Engineer-
ing and Applications,2010,46(22):103-106.
Abstract:Based on cost-benefit analysis and the“level higher than relation”PROMETHEE multi-criteria preference index,
an information security risk control model is put the preference function,the criteria values and criteria
weights of decision-makers,“edge flow”and“inferior flow”of each preparation program is calculated pare advantag-
es and disadvantages of control measurements,then the partial plete sequence is sensitivity analysis and
validation are conducted ,an example is given to illustrate the application of the proposed method.
Key words:information security;risk control;PROMETHEE;multi-attribute decision
摘要:在成本效益分析的基础上,引入“级别高于关系”的 PROMETHEE 多属性偏好指数,提出了基于 PROMETHEE 方法的信
息安全风险控制模型。该模型利用决策者给出的偏好,设置偏好函数、准则值和准则权重,从方案优劣程度入手,计算备选方案
的“优势流”和“劣势流”,得到方案集的部分或完全排序,并基于此对安全控制措施的备选方案进行有效地筛选。还对该模型的
灵敏度进行了分析和验证,最后结合实例分析了该风险控制