An information system security dynamic assessment method using stochastic Petri net based on business flow

Based on the feature that the information system serves as operation service, the operational safety performance indicating the business flow is seen as the indicators of security risk. Stochastic Petri nets are used to describe the systematic structure of the information system, which has quantified the performance of the business flow to calculate the overall security measurement according to the composition relationship and the functional relationship of the system equipment for business flow path, and to obtain the business security efficiency through its relevance. Assessment is fulfilled based on a specific system, which has verified the accuracy and validity of the proposed method.