Qi Yong

Information Security Risk Assessment Based on Analytic Hierarchy Process and Fuzzy Comprehensive

Starting with the theory and research status on the information security risk assessment, this paper puts forward information security risk evaluation method based on analytic hierarchy process and fuzzy comprehensive evaluation, and solves the difficulty of the qualitative index and quantitative evaluation in the risk assessment process. Finally, it gives examples to prove that this method can be well applied to information security risk assessment.

Information Security Risk Assessment Method Based on CORAS Frame

This paper first carry out the summary to the information security risk assessments present situation and the correlation criterion, then introduced in detail to the risk which possibly exists carry out the quantification based on the CORAS frames information security risk assessment method and using the analytic hierarchy process, finally uses on-line Electronic bank systems example, proved this method to be possible very well suitable in the information security risk assessment.This paper first carry out the summary to the information security risk assessments present situation and the correlation criterion, then introduced in detail to the risk which possibly exists carry out the quantification based on the CORAS frames information security risk assessment method and using the analytic hierarchy process, finally uses on-line Electronic bank systems example, proved this method to be possible very well suitable in the information security risk assessment.

A Service Access Security Control Model in Cyberspace

A service access control model in cyberspace is proposed, which provides a generalized and effective mechanism of security management with some items constraint specifications. These constraint specifications are organized to form a construction, and an enact process is proposed to make it scalable and flexible to meet the need of diversified service application systems in cyberspace. The model of this paper erases the downward information flow by extended rules of read/write, which is the breakthrough of the limitations when applying the standard role-based access control in cyberspace.