The Information System Security Assessment Model Based on TOPSIS Method and Linguisitc Viarable

Abstract

Information is the most valuable asset of most organizations today. At the same time, the problem of information security has also brought huge losses, and has attracted more and more attention from the society. Because of the complexity and uncertainty of information system, the security evaluation of information system inevitably involves a certain degree of fuzziness. A TOPSIS model based on linguistic variables for information system security assessment is proposed. Firstly, according to the feasibility and operability of information system security, a two-level index system of information system security is constructed. Secondly, linguistic variables are used to represent the evaluation values of the secondary indicators, and WAA operators are used to calculate the evaluation values of the primary indicators. Then TOPSIS method is used to evaluate and rank the schemes. The results show that TOPSIS method is more effective and practical for information system security risk assessment.