Design And Implementation Of Enterprise Information Security Risk Assessment System

With the development of information technology,various businesses have changed from traditional paper operations to informationized offices,more and more electronic data are widely used in business support,data analysis and decision-making,new product development,and external cooperation of organizations.Data has gradually become the core means of production and its' value are getting much attention than it used be.At the same time,data exchange,data trading and the related markets are born.How to ensure the safety of these behaviors,and then protect the legitimate rights and interests of the country,enterprises and individuals,will be a huge challenge.Establish an information security risk assessment model and conduct simulation assessments based on specific enterprise characteristics to more accurately assess and control the overall risk of enterprise information security.The system takes the information security risk assessment of credit-relevant companies as the main research goal,and explores the systematic assessment of the information security risks of such companies in the big data environment.Taking "Computer Information System Security Protection Level Classification Guidelines" as the standard,comprehensively considering the relationship between information security risk assessment elements and information security risk levels under big data environment,using Delphi method and C4.5 decision tree algorithm to establish a risk assessment system.Using C# as the development platform,a set of B/S architecture and platform-applicable evaluation system has been developed to realize the system risk assessment of various aspects of enterprise information security in the big data environment and provide suggestions for risk points.Finally,the information security risk assessment of a related company in a big data environment is selected as the object of empirical research,and the designed information security risk assessment system is tested,verified and analyzed and improved.The test results and operating status of the system are consistent with the evaluation results given by the authoritative risk assessment agency,which may indicate that the risk assessment application system has certain reference value in the risk assessment.Inaddition,the indicators and model design of the system have proved to be scientific and practical,and it is very consistent with the characteristics of enterprises under the big data environment.The evaluation results have certain guiding significance when the enterprise carries out security construction and risk judgment.