OCATAVE And FAHP Based On The Information System Of Risk Assessment Model

With the rapid development of computer technology and network communication technology, information technology has also been rapid progress. Today, information technology is one of the most important competitive country, have infiltrated all over the world and the social aspects of life, mankind has entered a rapid development of information society. Internet as an important platform for the global dissemination of information, making information transmission and processing of breaking down geographical boundaries of the restrictions, and instantly all over the world, but also to the external is not authorized to provide important information to steal the chance of your system. In today's completely open Internet environment, information systems security risk is always there. Computer viruses, authorization assault, eavesdropping, staff accidentally, natural disasters and other threats to the security of information systems, information security within the global losses caused by the rise. Therefore, security of information systems has become the focus of attention; we need to properly protect information systems.Firstly, from the information system risk assessment of significance and research results start with a comprehensive collection of information system risk assessment and understanding of relevant knowledge, on the domestic and international risk assessment on the development of information systems context for the simple sort, sum up the assessment of the success stories And the problems faced, and on this basis, selected as the OCTAVE evaluation criteria of this article. According to the status of university information system, the authors made appropriate adjustments and OCTAVE deletion, established a relatively complete scientific index system. Then on several commonly used assessment methods were compared and research, summed up the advantages and disadvantages of each evaluation process, selected and the fuzzy comprehensive evaluation method which combines the entropy model. The model is based on fuzzy mathematics, the principles of synthesis of fuzzy relations with some of the ill-defined and difficult to quantify the quantitative factors, from a number of factors to be evaluated on the level of the state of things under the comprehensive evaluation. However, this method also has some disadvantages, such as the quality and taste experts with subjective factors, directly affect the evaluation results of objective and fair, this article has the right to use the entropy method to determine the relative weight of each factor, to overcome these shortcomings, the evaluation results relatively fair and reasonable. Finally, should a university in Chongqing City, an information system, for example, examine the feasibility of the evaluation model.