Journal of Computer Applications ›› 2026, Vol. 46 ›› Issue (10): 3227-3232.DOI: 10.11772/j.issn.1001-9081.2025091123
• Cyber security • Previous Articles
Jingping WANG1(
), Yanting LIU1, Haiming LONG1, Yingjun ZHANG2
Received:2025-09-25
Revised:2025-11-28
Accepted:2025-12-01
Online:2025-12-18
Published:2026-10-10
Contact:
Jingping WANG
About author:LIU Yanting, born in 1981, M. S., engineer. Her research interests include information security.Supported by:通讯作者:
王晶萍
作者简介:刘艳婷(1981—),女,河北邯郸人,工程师,硕士,主要研究方向:信息安全基金资助:CLC Number:
Jingping WANG, Yanting LIU, Haiming LONG, Yingjun ZHANG. Information security risk assessment based on multi-objective programming and evidential reasoning theory[J]. Journal of Computer Applications, 2026, 46(10): 3227-3232.
王晶萍, 刘艳婷, 龙海明, 张英俊. 基于多目标规划和证据推理理论的信息安全风险评估[J]. 《计算机应用》唯一官方网站, 2026, 46(10): 3227-3232.
Add to citation manager EndNote|Ris|BibTeX
URL: https://www.joca.cn/EN/10.11772/j.issn.1001-9081.2025091123
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.5,0.6],[0.2,0.3]) | ([0.3,0.5],[0.4,0.5]) | ([0.6,0.7],[0.2,0.3]) | ([0.5,0.7],[0.1,0.2]) | ([0.1,0.4],[0.3,0.5]) | |
| ([0.3,0.4],[0.4,0.6]) | ([0.1,0.3],[0.2,0.4]) | ([0.3,0.4],[0.4,0.5]) | ([0.2,0.4],[0.5,0.6]) | ([0.7,0.8],[0.1,0.2]) | |
| ([0.4,0.5],[0.3,0.5]) | ([0.7,0.8],[0.1,0.2]) | ([0.5,0.8],[0.1,0.2]) | ([0.4,0.6],[0.2,0.3]) | ([0.5,0.6],[0.2,0.3]) | |
| ([0.3,0.5],[0.4,0.5]) | ([0.1,0.2],[0.7,0.8]) | ([0.1,0.2],[0.5,0.8]) | ([0.2,0.3],[0.4,0.6]) | ([0.2,0.3],[0.5,0.6]) |
Tab. 1 Risk assessment matrix from expert 1
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.5,0.6],[0.2,0.3]) | ([0.3,0.5],[0.4,0.5]) | ([0.6,0.7],[0.2,0.3]) | ([0.5,0.7],[0.1,0.2]) | ([0.1,0.4],[0.3,0.5]) | |
| ([0.3,0.4],[0.4,0.6]) | ([0.1,0.3],[0.2,0.4]) | ([0.3,0.4],[0.4,0.5]) | ([0.2,0.4],[0.5,0.6]) | ([0.7,0.8],[0.1,0.2]) | |
| ([0.4,0.5],[0.3,0.5]) | ([0.7,0.8],[0.1,0.2]) | ([0.5,0.8],[0.1,0.2]) | ([0.4,0.6],[0.2,0.3]) | ([0.5,0.6],[0.2,0.3]) | |
| ([0.3,0.5],[0.4,0.5]) | ([0.1,0.2],[0.7,0.8]) | ([0.1,0.2],[0.5,0.8]) | ([0.2,0.3],[0.4,0.6]) | ([0.2,0.3],[0.5,0.6]) |
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.4,0.5],[0.2,0.4]) | ([0.3,0.4],[0.4,0.6]) | ([0.6,0.7],[0.1,0.2]) | ([0.5,0.6],[0.1,0.3]) | ([0.1,0.3],[0.3,0.5]) | |
| ([0.3,0.5],[0.4,0.5]) | ([0.1,0.3],[0.3,0.7]) | ([0.3,0.4],[0.4,0.5]) | ([0.2,0.3],[0.6,0.7]) | ([0.6,0.8],[0.1,0.2]) | |
| ([0.4,0.6],[0.3,0.4]) | ([0.6,0.8],[0.1,0.2]) | ([0.7,0.8],[0.1,0.2]) | ([0.4,0.6],[0.3,0.4]) | ([0.5,0.6],[0.2,0.4]) | |
| ([0.3,0.4],[0.4,0.6]) | ([0.1,0.2],[0.6,0.8]) | ([0.1,0.2],[0.7,0.8]) | ([0.3,0.4],[0.4,0.6]) | ([0.2,0.4],[0.5,0.6]) |
Tab. 2 Risk assessment matrix from expert 2
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.4,0.5],[0.2,0.4]) | ([0.3,0.4],[0.4,0.6]) | ([0.6,0.7],[0.1,0.2]) | ([0.5,0.6],[0.1,0.3]) | ([0.1,0.3],[0.3,0.5]) | |
| ([0.3,0.5],[0.4,0.5]) | ([0.1,0.3],[0.3,0.7]) | ([0.3,0.4],[0.4,0.5]) | ([0.2,0.3],[0.6,0.7]) | ([0.6,0.8],[0.1,0.2]) | |
| ([0.4,0.6],[0.3,0.4]) | ([0.6,0.8],[0.1,0.2]) | ([0.7,0.8],[0.1,0.2]) | ([0.4,0.6],[0.3,0.4]) | ([0.5,0.6],[0.2,0.4]) | |
| ([0.3,0.4],[0.4,0.6]) | ([0.1,0.2],[0.6,0.8]) | ([0.1,0.2],[0.7,0.8]) | ([0.3,0.4],[0.4,0.6]) | ([0.2,0.4],[0.5,0.6]) |
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.4,0.7],[0.1,0.2]) | ([0.3,0.5],[0.3,0.4]) | ([0.6,0.7],[0.1,0.2]) | ([0.5,0.6],[0.1,0.3]) | ([0.3,0.5],[0.4,0.5]) | |
| ([0.4,0.5],[0.2,0.4]) | ([0.2,0.4],[0.4,0.5]) | ([0.4,0.5],[0.3,0.4]) | ([0.1,0.2],[0.7,0.8]) | ([0.6,0.7],[0.2,0.3]) | |
| ([0.2,0.4],[0.3,0.4]) | ([0.6,0.8],[0.1,0.2]) | ([0.5,0.7],[0.1,0.3]) | ([0.5,0.7],[0.2,0.3]) | ([0.6,0.8],[0.1,0.2]) | |
| ([0.3,0.4],[0.2,0.4]) | ([0.1,0.2],[0.6,0.8]) | ([0.1,0.3],[0.5,0.7]) | ([0.2,0.3],[0.5,0.7]) | ([0.1,0.2],[0.6,0.8]) |
Tab. 3 Risk assessment matrix from expert 3
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.4,0.7],[0.1,0.2]) | ([0.3,0.5],[0.3,0.4]) | ([0.6,0.7],[0.1,0.2]) | ([0.5,0.6],[0.1,0.3]) | ([0.3,0.5],[0.4,0.5]) | |
| ([0.4,0.5],[0.2,0.4]) | ([0.2,0.4],[0.4,0.5]) | ([0.4,0.5],[0.3,0.4]) | ([0.1,0.2],[0.7,0.8]) | ([0.6,0.7],[0.2,0.3]) | |
| ([0.2,0.4],[0.3,0.4]) | ([0.6,0.8],[0.1,0.2]) | ([0.5,0.7],[0.1,0.3]) | ([0.5,0.7],[0.2,0.3]) | ([0.6,0.8],[0.1,0.2]) | |
| ([0.3,0.4],[0.2,0.4]) | ([0.1,0.2],[0.6,0.8]) | ([0.1,0.3],[0.5,0.7]) | ([0.2,0.3],[0.5,0.7]) | ([0.1,0.2],[0.6,0.8]) |
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.6,0.7],[0.2,0.3]) | ([0.3,0.4],[0.3,0.4]) | ([0.7,0.8],[0.1,0.2]) | ([0.5,0.6],[0.1,0.3]) | ([0.1,0.2],[0.5,0.7]) | |
| ([0.4,0.5],[0.4,0.5]) | ([0.1,0.2],[0.2,0.3]) | ([0.3,0.4],[0.5,0.6]) | ([0.2,0.3],[0.4,0.6]) | ([0.6,0.7],[0.1,0.2]) | |
| ([0.4,0.5],[0.3,0.4]) | ([0.6,0.7],[0.1,0.3]) | ([0.5,0.8],[0.1,0.2]) | ([0.4,0.5],[0.2,0.3]) | ([0.5,0.6],[0.3,0.4]) | |
| ([0.3,0.4],[0.4,0.5]) | ([0.1,0.3],[0.6,0.7]) | ([0.1,0.2],[0.5,0.8]) | ([0.2,0.3],[0.4,0.5]) | ([0.3,0.4],[0.5,0.6]) |
Tab. 4 Risk assessment matrix from expert 4
| 风险等级 | |||||
|---|---|---|---|---|---|
| ([0.6,0.7],[0.2,0.3]) | ([0.3,0.4],[0.3,0.4]) | ([0.7,0.8],[0.1,0.2]) | ([0.5,0.6],[0.1,0.3]) | ([0.1,0.2],[0.5,0.7]) | |
| ([0.4,0.5],[0.4,0.5]) | ([0.1,0.2],[0.2,0.3]) | ([0.3,0.4],[0.5,0.6]) | ([0.2,0.3],[0.4,0.6]) | ([0.6,0.7],[0.1,0.2]) | |
| ([0.4,0.5],[0.3,0.4]) | ([0.6,0.7],[0.1,0.3]) | ([0.5,0.8],[0.1,0.2]) | ([0.4,0.5],[0.2,0.3]) | ([0.5,0.6],[0.3,0.4]) | |
| ([0.3,0.4],[0.4,0.5]) | ([0.1,0.3],[0.6,0.7]) | ([0.1,0.2],[0.5,0.8]) | ([0.2,0.3],[0.4,0.5]) | ([0.3,0.4],[0.5,0.6]) |
| 风险等级 | |||||
|---|---|---|---|---|---|
| (0.664 8,0.209 9) | (0.442 4,0.364 7) | (0.794 8,0.125 1) | (0.694 3,0.160 3) | (0.251 0,0.570 3) | |
| (0.439 1,0.460 1) | (0.298 3,0.277 8) | (0.387 5,0.503 6) | (0.191 5,0.723 4) | (0.804 6,0.122 3) | |
| (0.482 4,0.385 0) | (0.754 7,0.292 8) | (0.787 2,0.117 7) | (0.612 3,0.258 5) | (0.690 8,0.222 0) | |
| (0.385 0,0.482 4) | (0.185 1,0.488 5) | (0.117 7,0.787 2) | (0.258 5,0.612 3) | (0.222 0,0.690 8) |
Tab. 5 Integrated risk assessment matrix
| 风险等级 | |||||
|---|---|---|---|---|---|
| (0.664 8,0.209 9) | (0.442 4,0.364 7) | (0.794 8,0.125 1) | (0.694 3,0.160 3) | (0.251 0,0.570 3) | |
| (0.439 1,0.460 1) | (0.298 3,0.277 8) | (0.387 5,0.503 6) | (0.191 5,0.723 4) | (0.804 6,0.122 3) | |
| (0.482 4,0.385 0) | (0.754 7,0.292 8) | (0.787 2,0.117 7) | (0.612 3,0.258 5) | (0.690 8,0.222 0) | |
| (0.385 0,0.482 4) | (0.185 1,0.488 5) | (0.117 7,0.787 2) | (0.258 5,0.612 3) | (0.222 0,0.690 8) |
| 方法 | 评估结果 |
|---|---|
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 本文方法 |
Tab. 6 Risk level ranking results of different methods
| 方法 | 评估结果 |
|---|---|
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 文献[ | |
| 本文方法 |
| [1] | 沈昌祥,张焕国,冯登国,等. 信息安全综述[J]. 中国科学(E辑:信息科学), 2007, 37(2): 129-150. |
| Shen Changxiang, Zhang Huanguo, Feng Dengguo, et al. Overview of information security[J]. Science in China (Series E: Information Sciences), 2007, 37(2): 129-150. | |
| [2] | 方滨兴. 透视海外扩张的“安全”障碍[J]. 信息安全与通信保密, 2013(1): 1-1. |
| Fang Binxing. Perspective on the "security" obstacles to overseas expansion[J]. Information Security and Communications Privacy, 2013(1): 1-1. | |
| [3] | 方滨兴,殷丽华. 关于信息安全定义的研究[J]. 信息网络安全, 2008(1): 8-10. |
| Fang Binxing, Yin Lihua. On the definition of information security[J]. Netinfo Security, 2008(1): 8-10. | |
| [4] | 沈昌祥. 我国信息安全等级保护制度的创新与发展[J]. 网络空间安全, 2016, 7(S2): 5-6. |
| Shen Changxiang. The innovation and development of China’s classified protection system for information security[J]. Cyberspace Security, 2016, 7(S2): 5-6. | |
| [5] | 方滨兴. 云平台的可信性评测[J]. 保密工作, 2020(3): 53-55. |
| Fang Binxing. Trustworthiness evaluation of cloud platforms[J]. Secrecy Work, 2020(3): 53-55. | |
| [6] | 杨武俊. 多层次模糊综合评判法在信息安全风险评估中的应用[J]. 网络安全技术与应用, 2013(11): 33-34, 32. |
| Yang Wujun. Applying multi-level fuzzy comprehensive evaluation in information security risk assessment[J]. Network Security Technology and Application, 2013(11): 33-34, 32. | |
| [7] | 黄国庆,肖爽. 改进犹豫模糊集在信息安全风险评估上的应用[J]. 微电子学与计算机, 2018, 35(5): 105-108, 115. |
| Huang Guoqing, Xiao Shuang. The application of improved hesitant fuzzy set in information security risk assessment[J]. Microelectronics and Computer, 2018, 35(5): 105-108, 115. | |
| [8] | 白冰. 基于模糊证据理论的信息系统安全风险评估分析[J]. 电子设计工程, 2020, 28(14): 81-84, 89. |
| Bai Bing. Analysis of information system security risk assessment based on fuzzy evidence theory[J]. Electronic Design Engineering, 2020, 28(14): 81-84, 89. | |
| [9] | Deb R, Roy S. A software defined network information security risk assessment based on Pythagorean fuzzy sets[J]. Expert Systems with Applications, 2021, 183: No.115383. |
| [10] | 宋晓镔. 基于模糊熵权法二次系统信息安全风险评估研究[J]. 电脑编程技巧与维护, 2024(2): 170-172. |
| Song Xiaobin. Research on information security risk assessment of secondary systems based on fuzzy entropy weight method[J]. Computer Programming Skills and Maintenance, 2024(2): 170-172. | |
| [11] | 王康,李默涵. 信息系统安全风险评估方法研究[J]. 网络安全技术与应用, 2024(12): 18-21. |
| Wang Kang, Li Mohan. Research on information security risk assessment methods for information systems[J]. Network Security Technology and Application, 2024(12): 18-21. | |
| [12] | Li X. Personal information security risk assessment for E-waste recycling based on Fuzzy-GRA-TOPSIS and FMEA[J]. IEEE Transactions on Engineering Management, 2024, 71: 8240-8250. |
| [13] | Chen X, Deng Y. Evidential software risk assessment model on ordered frame of discernment[J]. Expert Systems with Applications, 2024, 250: No.123786. |
| [14] | Sato R, Kawaguchi H, Nakatani Y. Malcoda: practical and stochastic security risk assessment for enterprise networks[J]. IEEE Transactions on Dependable and Secure Computing, 2025, 22(2): 1383-1399. |
| [15] | 戴春豪,曹忠,尚文利,等. 功能安全与信息安全一体化风险评估[J]. 计算机仿真, 2025, 42(7): 40-45, 559. |
| Dai Chunhao, Cao Zhong, Shang Wenli, et al. Integrated risk assessment of functional safety and information security[J]. Computer Simulation, 2025, 42(7): 40-45, 559. | |
| [16] | Atanassov K, Gargov G. Interval valued intuitionistic fuzzy sets[J]. Fuzzy Sets and Systems, 1989, 31(3): 343-349. |
| [17] | Yang J B, Xu D L. On the evidential reasoning algorithm for multiple attribute decision analysis under uncertainty[J]. IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans, 2002, 32(3): 289-304. |
| [18] | He S F, Pan X H, Wang Y M, et al. A novel multi-criteria decision making framework based on evidential reasoning dealing with missing information from online reviews[J]. Information Fusion, 2024, 106: No.102264. |
| [19] | Zhang Y, Hu S, Zhou W. Multiple attribute group decision making using J-divergence and evidential reasoning theory under intuitionistic fuzzy environment[J]. Neural Computing and Applications, 2020, 32(10): 6311-6326. |
| [20] | Zeng S, Chen S M, Fan K Y. Interval-valued intuitionistic fuzzy multiple attribute decision making based on nonlinear programming methodology and TOPSIS method[J]. Information Sciences, 2020, 506: 424-442. |
| [21] | Khan W A, Arif W, Rashmanlou H, et al. Interval-valued picture fuzzy hypergraphs with application towards decision making[J]. Journal of Applied Mathematics and Computing, 2024, 70(2): 1103-1125. |
| [22] | Zheng J, Dong M. Interval-valued intuitionistic fuzzy multi-attribute decision-making based on entropy and bidirectional projection[J]. International Journal of Computational Intelligence Systems, 2025, 18: No.39. |
| [23] | Ruan C, Gong S, Chen X. Multi-criteria group decision-making with extended ELECTRE Ⅲ method and regret theory based on probabilistic interval-valued intuitionistic hesitant fuzzy information[J]. Complex and Intelligent Systems, 2025, 11: No.92. |
| [1] | Hailin XIAO, Tianyi HUANG, Qiuxiang DAI, Yuejun ZHANG, Zhongshan ZHANG. Safe reinforcement learning method for decision making of autonomous lane changing based on trajectory prediction [J]. Journal of Computer Applications, 2024, 44(9): 2958-2963. |
| [2] | Honglei YAO, Jiqiang LIU, Endong TONG, Wenjia NIU. Network security risk assessment method for CTCS based on α-cut triangular fuzzy number and attack tree [J]. Journal of Computer Applications, 2024, 44(4): 1018-1026. |
| [3] | Xiaoyu HUA, Dongfen LI, You FU, Kejun BI, Shi YING, Ruijin WANG. Industrial chain risk assessment and early warning model combining hierarchical graph neural network and long short-term memory [J]. Journal of Computer Applications, 2024, 44(10): 3223-3231. |
| [4] | Shaochen HAO, Zizuan WEI, Yao MA, Dan YU, Yongle CHEN. Network intrusion detection model based on efficient federated learning algorithm [J]. Journal of Computer Applications, 2023, 43(4): 1169-1175. |
| [5] | Hongliang TIAN, Ping GE, Mingjie XIAN. Distribution network operation exception management mechanism based on blockchain [J]. Journal of Computer Applications, 2023, 43(11): 3504-3509. |
| [6] | Zexi WANG, Minqing ZHANG, Yan KE, Yongjun KONG. Reversible data hiding algorithm in encrypted domain based on secret image sharing [J]. Journal of Computer Applications, 2022, 42(5): 1480-1489. |
| [7] | MA Hua, CHEN Yuepeng, TANG Wensheng, LOU Xiaoping, HUANG Zhuoxuan. Survey of research progress on crowdsourcing task assignment for evaluation of workers’ ability [J]. Journal of Computer Applications, 2021, 41(8): 2232-2241. |
| [8] | XIAO Kai, WANG Meng, TANG Xinyu, JIANG Tonghai. Public welfare time bank system based on blockchain technology [J]. Journal of Computer Applications, 2019, 39(7): 2156-2161. |
| [9] | LUO Xiaofeng, YANG Xingchun, HU Yong. Improved decision diagram for attribute-based access control policy evaluation and management [J]. Journal of Computer Applications, 2019, 39(12): 3569-3574. |
| [10] | CAO Zhenhuan, CAI Xiaohai, GU Menghe, GU Xiaozhuo, LI Xiaowei. Android permission management and control scheme based on access control list mechanism [J]. Journal of Computer Applications, 2019, 39(11): 3316-3322. |
| [11] | BU Tongtong, CAO Tianjie. Risk assessment method of Android application based on permission [J]. Journal of Computer Applications, 2019, 39(1): 131-135. |
| [12] | LI Zhaobin, LI Weilong, WEI Zhanzhen, LIU Mengtian. Research and implementation of key module of data security processing mechanism in software defined network [J]. Journal of Computer Applications, 2018, 38(7): 1929-1935. |
| [13] | XIONG Ningxin, WANG Yingming. Multiple attribute decision method based on improved fuzzy entropy and evidential reasoning [J]. Journal of Computer Applications, 2018, 38(10): 2801-2806. |
| [14] | KE Yan, ZHANG Minqing, LIU Jia, YANG Xiaoyuan. Overview on reversible data hiding in encrypted domain [J]. Journal of Computer Applications, 2016, 36(11): 3067-3076. |
| [15] | KE Yan, ZHANG Minqing, LIU Jia. Separable reversible Hexadecimal data hiding in encrypted domain [J]. Journal of Computer Applications, 2016, 36(11): 3082-3087. |
| Viewed | ||||||
|
Full text |
|
|||||
|
Abstract |
|
|||||