An Information Security Evaluation Method Based on Entropy Theory and Improved TOPSIS

Abstract

Information security problems are becoming severer with the development of cyberspace. Information security evaluation is a significant and efficient way to reduce information security risks. In this paper, we propose an information security evaluation method combining entropy theory with Technique for Order Preference by Similarity to an Ideal Solution (TOPSIS). Entropy theory is used to calculate the indicators' objective weights which can be adjusted by subjective weights. TOPSIS is adapted to obtain the final evaluation result by analyzing the evaluation data and the weight of indicators. This method combines the objective weight and subjective weight of indicators and improves TOPSIS to obtain a reasonable evaluation result. Test cases are given to illustrate the calculation and application process and verify the function of improved TOPSIS.