关键词: 信息安全, 风险评估, 区间直觉模糊集, 多目标规划, 证据推理

Abstract: With the rapid development of mobile Internet and the emergence of massive big data, information security risks were increasingly highlighted. The construction and improvement of a scientific and objective security risk assessment system were regarded as having great theoretical and practical significance. However, existing assessment methods were faced with challenges such as the representation of uncertain information, the objective quantification of expert and attribute weights, and the fusion of uncertain information. To address these challenges, an information security risk assessment model based on multi-objective programming and evidence reasoning theory was proposed. First, interval-valued intuitionistic fuzzy numbers were used to represent uncertain information, and three types of basic operational rules were defined. Second, expert and attribute weights were objectively quantified based on multi-objective programming. Third, evidence reasoning fusion rules in the interval-valued intuitionistic fuzzy environment were introduced to solve the fusion problem of uncertain information. Finally, the Technique for Order Preference by Similarity to Ideal Solution (TOPSIS) was referenced for comprehensive information security assessment. Experimental results verified the effectiveness and feasibility of the proposed algorithm model in information representation, weight quantification, and assessment.

Key words: information security, risk assessment, interval-valued intuitionistic fuzzy set, multi-objective programming, evidence reasoning