An Information System Security Evaluation Model Based on AHP and GRAP

Author

Cuihua, Xu ; Jiajun, Lin

Author_Institution

Sch. of Inf. Sci. & Eng., East China Univ. of Sci. & Technol., Shanghai, China

fYear

2009

fDate

7-8 Nov. 2009

Firstpage

493

Lastpage

496

Abstract

This paper presents an information system security evaluation model referring to Common criteria (CC). Analytic Hierarchy Process (AHP) and Grey Relational Analytic Process (GRAP) are applied to this model which combines the qualitative evaluation with the quantitative decision. AHP is used to obtain the indices´ weights with respect to the final goal of the security evaluation. GRAP is adapted to analyze evaluation data to implement a quantitative integration evaluation. At last, a test case is given to illustrate the application and the effectiveness of this model.

Keywords

decision trees; grey systems; information systems; matrix algebra; security of data; standards; analytic hierarchy process; common criteria; grey relational analytic process; information system security evaluation model; quantitative integration evaluation; Computer security; Data analysis; Data security; Decision trees; Information analysis; Information science; Information security; Information systems; Management information systems; Paper technology; Gray Relation Analytic Process; Information security evaluation; formatting; the Analytic Hierarchy Process;

fLanguage

English

Publisher

ieee

Conference_Titel

Web Information Systems and Mining, 2009. WISM 2009. International Conference on

Conference_Location

Shanghai

Print_ISBN

978-0-7695-3817-4

Type

conf

DOI

10.1109/WISM.2009.105

Filename

5369289