An Information Security Risk Evaluation Scheme Based on OWA Operator and Grey System Theory

Abstract

In order to make an accurate and quantitative assessment on the security risk of information system, the method of information security risk assessment which combines the advantages of OWA operator and DHGF algorithm based on grey system theory is put forward. By the deep mining on priori sample value of information security risk assessment indexes, the objective attribute weight is obtained with OWA operator. The fusion on assessed value is achieved using grey system theory. This method is applied to information security risk assessment. It guarantees the objectivity of assessment result, while reducing the dependency on the integrity of the assessed value. The strict requirements on the indexes in conventional information risk assessment approaches are lifted, thereby resolving the problem of objective quantification. The example of information risk assessment demonstrates the effectiveness and objectivity of this method.