Security Risk Evaluation Model on Management Information System

Abstract

With the rapid development of computer, insecurity factors(such as computer virus, hacker) influences the development of MIS, safety risk evaluation has been an important task. This paper describes a risk evaluation method for MIS based on fuzzy set theory which uses linguistic variables and respective fuzzy numbers to evaluate the factors. The primary weights of factors and evaluation of alternatives are determined by applying linguistic variables and fuzzy numbers. The notion of Shapely value is used to determine the global value of each factor in accomplishing the overall objective of the risk evaluation process, so the primary weights are revised, thus the importance of factors can be reflected more precisely. A major advantage of the method is that it allows experts and engineers to express their opinions on safety risk evaluation in linguistic variables rather than crisp values. An illustration is presented to demonstrate the application of the method in risk evaluation. The results are consistent with the results calculated by conventional risk evaluation method. The research demonstrates that the method is objective and accurate, and is an application value in the risk evaluation for MIS.