| The rapid development of big data has brought new opportunities to the telecom industry.By mining and analyzing core data such as telecommunication service data,customer service data and terminal information,it helps telecom operator to understand users,improve products and improve profitability.At the same time,new business forms and technical features such as infrastructure virtualization,massive component open source,centralized data management,sensitive data sharing,and data external cooperation have also brought new security issues to the telecom business.Such as virtual machine escape and jump,open source component vulnerabilities,desensitization data reverse restore,and so on.Once these vulnerabilities are exploited and occurs data breach security incident,it often involves a large amount of customer sensitive information and corporate data assets,which has a significant impact on the reputation of the enterprise,the interests of the enterprise,and the privacy of the user.This paper takes the information security risk of telecom operator's big data platform as the research object,review the research status of big data security,and discover the lack of research on risk assessment indicator system combined with big data technology architecture.And most of them stay in the theoretical explanation of big data risk assessment,lack of analysis and application combined with actual cases.Therefore,based on the analysis of the technical architecture and the main security risks,this paper systematically constructs an information security risk assessment indicator system.And based on the analytic hierarchy process and fuzzy comprehensive evaluation method,this paper propose a multi-level fuzzy comprehensive evaluation model which has high operability.In addition,this paper applies the established method to conduct a risk assessment on a telecom operator's big data platform,and proposes security reinforcement measures from organizational leadership,data management,business cooperation,and platform maintenance,which has high application value. |