Research On Information System Risk Assessment Based On Interval-valued Intuitionistic Fuzzy Sets

With the deepening of information construction, application fields of information system has been increasing to all aspects of national economy and people’s livelihood. Although information System brings a lot convenience, it will cause a huge impact on the society when it gets attacked, and its security protection has got much attention in recent years. Risk assessment focuses on risk value and expected loss value to study the security of information system, and its assessment results can directly show the risk of information system. In the process of risk assessment, artificial subjective factors have a certain impact on assessment results, many scholars use different theoretical model to research on risk assessment methods. Although these theories can complete the task of risk assessment, these can’t describe the artificial subjective factors in a better way. Interval-valued intuitionistic fuzzy sets can better describe the state of man’s subjective decision, Interval-valued intuitionistic fuzzy sets are introduced to risk assessment field.To complete the risk assessment based on interval-valued intuitionistic fuzzy sets, the following aspects are focused:(1) A similarity measure for interval-valued intuitionistic fuzzy sets is presented. In rectangular coordinate system, the interval-valued intuitionistic fuzzy sets are transformed into quadrangle in the rectangular coordinate system, by analyzing the covering or separating relation between different area to calculate the similarity of interval-valued intuitionistic fuzzy sets. This approach expands the method of similarity calculating, satisfied the definition of similarity measure, and can be used in reality environment.(2) An information system risk assessment method is presented, based on interval-valued intuitionistic fuzzy sets similarity measure. In the quantify part of risk assessment process, subjective factors are quantified by using interval-valued intuitionistic fuzzy sets, and interval-valued intuitionistic fuzzy decision matrix is generated, a set of risk assessment method is researched based on the presented similarity algorithm.(3) An information security risk assessment system is designed and developed, based on interval-valued intuitionistic fuzzy sets similarity measure. Vulnerabilities are gathered according to information security rank protection standards, threats are recognized by analyzing the deployed environment of information system. Combining the vulnerabilities and threats with the assets, and these information can be transformed into interval-valued intuitionistic fuzzy sets, then let assessment module handle it and get risk value and expected loss value, the restructuring suggestions are presented for the discovered problems, and the risk assessment report can be generated. The system realized the whole process for risk assessment, it has a scientific and reasonable risk calculating for information system, and it also has some practical value.