Title :
An Information System Security Evaluation Model Based on AHP and GRAP
Author :
Cuihua, Xu ; Jiajun, Lin
Author_Institution :
Sch. of Inf. Sci. & Eng., East China Univ. of Sci. & Technol., Shanghai, China
Abstract :
This paper presents an information system security evaluation model referring to Common criteria (CC). Analytic Hierarchy Process (AHP) and Grey Relational Analytic Process (GRAP) are applied to this model which combines the qualitative evaluation with the quantitative decision. AHP is used to obtain the indices´ weights with respect to the final goal of the security evaluation. GRAP is adapted to analyze evaluation data to implement a quantitative integration evaluation. At last, a test case is given to illustrate the application and the effectiveness of this model.
Keywords :
decision trees; grey systems; information systems; matrix algebra; security of data; standards; analytic hierarchy process; common criteria; grey relational analytic process; information system security evaluation model; quantitative integration evaluation; Computer security; Data analysis; Data security; Decision trees; Information analysis; Information science; Information security; Information systems; Management information systems; Paper technology; Gray Relation Analytic Process; Information security evaluation; formatting; the Analytic Hierarchy Process;
Conference_Titel :
Web Information Systems and Mining, 2009. WISM 2009. International Conference on
Conference_Location :
Shanghai
Print_ISBN :
978-0-7695-3817-4
DOI :
10.1109/WISM.2009.105
