《计算机应用》唯一官方网站 ›› 2026, Vol. 46 ›› Issue (10): 3227-3232.DOI: 10.11772/j.issn.1001-9081.2025091123

• 网络空间安全 • 上一篇    

基于多目标规划和证据推理理论的信息安全风险评估

王晶萍1(), 刘艳婷1, 龙海明1, 张英俊2   

  1. 1.北京师范大学 信息网络中心,北京 100875
    2.北京交通大学 计算机科学与技术学院,北京 100044
  • 收稿日期:2025-09-25 修回日期:2025-11-28 接受日期:2025-12-01 发布日期:2025-12-18 出版日期:2026-10-10
  • 通讯作者: 王晶萍
  • 作者简介:刘艳婷(1981—),女,河北邯郸人,工程师,硕士,主要研究方向:信息安全
    龙海明(1987—),男,山东滕州人,助理研究员,硕士,主要研究方向:信息安全
    张英俊(1980—),男,内蒙古呼和浩特人,副教授,博士,CCF会员,主要研究方向:数据挖掘、决策理论。
  • 基金资助:
    国家重点研发计划项目(2022YFB2603302);北京市自然科学基金资助项目(L251029);国家重点实验室项目(2025YJ153)

Information security risk assessment based on multi-objective programming and evidential reasoning theory

Jingping WANG1(), Yanting LIU1, Haiming LONG1, Yingjun ZHANG2   

  1. 1.Center of Information and Network Technology,Beijing Normal University,Beijing 100875,China
    2.School of Computer Science and Technology,Beijing Jiaotong University,Beijing 100044,China
  • Received:2025-09-25 Revised:2025-11-28 Accepted:2025-12-01 Online:2025-12-18 Published:2026-10-10
  • Contact: Jingping WANG
  • About author:LIU Yanting, born in 1981, M. S., engineer. Her research interests include information security.
    LONG Haiming, born in 1987, M. S., assistant research fellow. His research interests include information security.
    ZHANG Yingjun, born in 1980, Ph. D., associate professor. His research interests include data mining, decision theory.
  • Supported by:
    National Key Research and Development Program of China(2022YFB2603302);Beijing Natural Science Foundation(L251029);Project of State Key Laboratory(2025YJ153)

摘要:

随着移动互联网快速发展和海量大数据的涌现,信息安全风险日益凸显,构建和完善科学、客观的安全风险评估体系具有重要的理论和现实意义。然而,现有评估方法还面临不确定信息的表示、专家和属性权重的客观量化以及不确定信息融合等挑战。针对上述挑战,提出一种基于多目标规划和证据推理理论的信息安全风险评估模型。首先,利用区间直觉模糊数表示不确定信息,并定义三类基本运算法则;其次,基于多目标规划客观量化专家和属性权重;再次,引入区间直觉模糊环境下的证据推理融合规则,以解决不确定信息的融合问题;最后,借鉴逼近理想解方法TOPSIS(Technique for Order Preference by Similarity to Ideal Solution),综合评估信息安全。实验结果验证了所提模型在信息表示、权重量化和评估方面的有效性和可行性。

关键词: 信息安全, 风险评估, 区间直觉模糊集, 多目标规划, 证据推理

Abstract:

With the rapid development of mobile Internet and the emergence of massive big data, information security risks are increasingly prominent, so the construction and improvement of a scientific and objective security risk assessment system have great theoretical and practical significance. However, the existing assessment methods face challenges such as the representation of uncertain information, the objective quantification of expert and attribute weights, and the fusion of uncertain information. To address these challenges, an information security risk assessment model based on multi-objective programming and evidential reasoning theory was proposed. First, interval-valued intuitionistic fuzzy numbers were used to represent uncertain information, and three basic operational laws were defined. Second, expert and attribute weights were quantified objectively based on multi-objective programming. Third, evidential reasoning fusion rules in the interval-valued intuitionistic fuzzy environment were introduced to solve the fusion problem of uncertain information. Finally, the ideal solution approaching method TOPSIS (Technique for Order Preference by Similarity to Ideal Solution) was referenced for comprehensive information security assessment. Experimental results verify the effectiveness and feasibility of the proposed model in information representation, weight quantification, and risk assessment.

Key words: information security, risk assessment, Interval-Valued Intuitionistic Fuzzy Set (IVIFS), multi-objective programming, evidential reasoning

中图分类号: