Research Of The Level Protection Assessment Evaluation Method Based On Matter-element Extension

With the rapid process of the information society, information systems have beenwidely applied to various fields of social life. Meanwhile, information system also facesa variety of threats. Depending on the importance of information systems, China hasproposed to be targeted to carry out the security level protection. The level protectionassessment is the key one to carry information system level protection work, evaluationmethods currently used for information system level protection assessment mostlyachieved from the qualitative point of view, the lack of practical, effective and scientificassessment evaluation model, too many subjective factors in the assessment process willaffect the credibility and impartiality of assessment results inevitably, So, how toachieve information system level protection assessment evaluation is particularlyimportant from a quantitative point of view.In response to these problems, in order to make the level protection assessmentevaluation results of the information system more objective and intuitive, throughresearch and comprehensive comparison of evaluation methods. This paper selectsmatter-element extension model to conduct analysis and research of informationsystems security levels in line with the degree of compliance quantitative. Theadvantage of this method is that through the establishment of multi-index informationsystems level protection assessment evaluation matter-element model, the multipleattribute decision making decisions into a single index can reflect the informationsystems level protection assessment from both quantitative and qualitative aspects ofcompliance the extent of the evaluation results, and further improve the accuracy of the assessment results. The main work includes three aspects as follow:1. Building information systems level protection assessment evaluation system.Finishing the collation and research to the basic theoretical knowledge of theinformation systems level protection, a comprehensive analysis of the affecting factorsof information systems security, using Analytic Hierarchy Process(AHP) and expertconsultation to establish a hierarchical model of information system security factors todetermine the10level indicator evaluation dimensions described in informationsystems security, building information systems level protection assessment evaluationindicator system.2. Determining the weight of each index. Establishing a multi-level system ofindicators by AHP, combined questionnaire to get the weight of each index;3. Establishing matter-element extension model. Based on matter-elementextension theory, it establishes information system level protection matter-elementextension model of indicator layer and target layer respectively, obtains the degree ofinformation systems in line with the quantitative determination of the results bycalculating. In the evaluation process, measured data is obtained by the field study tothe information systems which is measured, marks to each control point index of systemin accordance with the assessment requirements, the result datas are the datas beenprocessed by arithmetic weighted average method, and they will be used in thecalculation of the model. This model is used to the evaluation of an insurancecompany’s information system, it verifies the effective and scientific of the model.This paper combines the subjective and objective analysis, and the quantitative andqualitative research methods, conducts scientific and effective evaluation to theinformation systems security level, improves the accuracy and rationality of theevaluation results, this method is an innovative of information system level protectionassessment evaluation method, and provides the necessary basis to solve and improvesafety problems of information systems.