Dynamic Evaluation Model of Security Risk in Information System

Dynamic risk evaluation model provides a new way against to the efficiency of traditional static evaluation model which only focused on the results made at a time. It is a model to transfer the information system into topological and combinational construction, users´ operation of the information system into the conception of visiting route, the connection between components into independent and collaborative relations, and the combinational relation of components into serial and parallel connection types. When the system changed, the dynamic evaluation based on changes is completed by discussing the changed components, defining the changing pattern and the affected scale, and evaluating the effects on other components and the whole system.