Research And Application On Information Security Risk Assessment Of Techcommunication System

With the events of information security appearing frequently,information security has reached the height of national security strategy.Compared to Passive Protection,Active Defense has become a trend to solve the problem of information security.Information Security Risk Assessment is an effective way to identify potential systematic risks and comprehensively know about the security conditions of the system.At present,the research of information security risk assessment in China is in a stage of rapid development.Our country has promulgated a lot of Standards for Information Security Risk Assessment and Industrial.Research shows most of the standards are theoretical,lacking of the Research of Specific system risk assessment project implementation system.Besides,How we can analyze and construct evaluation system to provide effective guidance for the general assessment and how we can optimize the existing evaluation methods to make the evaluation result more scientific,objective and comprehensive will be the focus of information security research.First,research on summarize the relationship among information security risk assessment,classified protection,risk management.On the basis of the domestic research status,the paper defined the researching target as operational and maintaining stages of telecommunication system.Second,built the implementation system of information security risk assessment for the telecommunication system,Based on analyzes information security risk assessment procedure with related project experience.the implementation process,input and output document are elaborated.According to the characteristic of telecommunication system,the paper summarizes the work and attention of recognizing risk to improve the efficency for assessing safety risk of telecommunication system,to ensure the quality of project's implementation,giving guidance and reference to the of risk assessment project of other systems.Third,in the view of many evaluation indexes,large data quantity and conclusions with fuzziness in the whole telecommunication etc,by using the commonly used evaluation methods,this paper puts forward a fuzzy comprehensive evaluation assessment method based on entropy weight.In the view of few specific risk value evaluation indexes,strong subjectivity,small data quantity,the difficulty of precisely calculating the specificrisk value and other characteristics,this paper puts forward a kind of method based on the combination between G1 and fuzzy distance combination evaluationFinally,the paper chooses a typical telecommunication system with an application example.and according to the actual operation situation,the paper establishes the overall system safety evaluation system and risk value of the solution system.By using evaluation methods to assess the whole safety evaluation and the solution to specific value of risk,the paper has evaluated recent situation of telecommunications system security and verified the science and validity of evaluation methods.