An Object-Oriented Information System Security Evaluation Method Based on Security Level Distinguishing Model

This paper proposes an object-oriented model for security evaluation with the concept of object-oriented technology, so that the security evaluation process structure can be clearer. A security level distinguishing model is developed to combine experts´ evaluation and auto evaluation together. Dempster-Shafer evidence theory is used in experts´ evaluation to synthesize different experts´ evaluation information. The evaluation results reveal that the proposed method for security evaluation is more believable and impersonal.