%0 Journal Article
%A ZHANG Le
%A ZHANG Liang
%A YANG Hong-yu
%T An Information System Risk Assessment Method Based on Risk Propagation
%D 
%R 10.13190/j.jbupt.2021-019
%J Journal of Beijing University of Posts and Telecommunications
%P 41-48
%V 44
%N 4
%X Traditional information system risk assessment methods do not consider the state change of nodes and the direction of risk propagation, and the accuracy of the evaluation results is affected by the subjectivity of experts. To solve these problems, an information system risk assessment method based on risk propagation is proposed. First, the initial state transition probability matrix of the node is determined, and the node state transition probability is obtained by modifying the matrix according to the attack attributes. Then, the propagation probability of nodes in all directions is calculated based on the topology network and node attribute value.Next, the three-parameter interval number method is used to obtain the quantitative value of node threat events. Finally, the risk value of each node is calculated according to the risk assessment method. Experimental results show that the proposed methodis more objective and reasonable, and it improves the integrity and accuracy of the risk assessment of information systems.
%U https://journal.bupt.edu.cn/EN/10.13190/j.jbupt.2021-019