Application of fuzzy comprehensive analysis to information security evaluation

Abstract

In order to improve the accuracy and validity of information system security evaluation and reduce the effects of diversities of experts' subjectivity on evaluation results, a clustering method based on the fuzzy comprehensive analysis was proposed. With this method, scores given by experts are pre-processed and transformed to relative weight ratios based on the weights of evaluation indexes, and after the transformation, difference scores with a large discrete degree are removed. Examples show that this clustering method makes the concentration range of valuation interval and the convergence of assessed scores be respectively increased by 30% and 15% to enhance the effect of the important evaluation indexes on evaluation results.