【摘要】：我國(guó)是海洋大國(guó),海洋在國(guó)民經(jīng)濟(jì)和社會(huì)發(fā)展中占有極其重要的地位。尤其近幾年來,我國(guó)海洋產(chǎn)業(yè)GDP基本上保持穩(wěn)步增長(zhǎng)。據(jù)初步核算,2015年我國(guó)海洋產(chǎn)業(yè)生產(chǎn)總值達(dá)64669億元,較上年增長(zhǎng)了7%。上海市海洋局和上海市發(fā)展改革委也于去年組織開展了上海市海洋發(fā)展戰(zhàn)略研究,并起草了《關(guān)于上海加快發(fā)展海洋事業(yè)的行動(dòng)方案(2015-2020年)》。隨著海洋強(qiáng)國(guó)戰(zhàn)略和“一帶一路”建設(shè)的推進(jìn),如何加強(qiáng)海洋信息化建設(shè),提升預(yù)報(bào)減災(zāi)、環(huán)境保護(hù)、維權(quán)執(zhí)法等海洋信息公共服務(wù)保障能力,成為各方關(guān)注的重大戰(zhàn)略問題。從總體來看,我國(guó)海洋信息化建設(shè)至今已經(jīng)取得了不錯(cuò)的進(jìn)展。例如,我國(guó)已經(jīng)制定并完善了國(guó)家海洋信息化規(guī)劃,海洋數(shù)據(jù)的獲取和處理能力、技術(shù)也有了提升,并且我國(guó)的多級(jí)海洋信息業(yè)務(wù)體系已經(jīng)初步形成,建設(shè)了國(guó)家海洋綜合管理系統(tǒng),海洋信息安全工作也在不斷加強(qiáng)。由于大部分的海洋數(shù)據(jù)都屬于國(guó)家機(jī)密,海洋信息安全出現(xiàn)了任何一點(diǎn)技術(shù)漏洞或管理不當(dāng)都有可能對(duì)我國(guó)利益帶來嚴(yán)重后果,因此在建設(shè)海洋信息系統(tǒng)時(shí),其信息安全問題不容忽視。據(jù)了解,國(guó)家海洋局、各省市、縣級(jí)海洋局及其他涉海單位都有針對(duì)不同海洋業(yè)務(wù)的不同安全等級(jí)要求。由此,對(duì)于海洋信息系統(tǒng)的安全風(fēng)險(xiǎn)評(píng)估就成為海洋信息安全管理機(jī)制建設(shè)的基礎(chǔ)。有效的風(fēng)險(xiǎn)評(píng)估模型可以判斷評(píng)估對(duì)象系統(tǒng)的安全措施建設(shè)是否滿足保護(hù)信息資產(chǎn)安全的要求,同時(shí)運(yùn)用合理的模型也可以監(jiān)控整個(gè)系統(tǒng)具體的安全狀況,從而能夠及時(shí)調(diào)整信息安全保障措施,始終將風(fēng)險(xiǎn)控制在可接受的范圍內(nèi),用低成本從最大程度上保障整個(gè)系統(tǒng)的安全。首先,本文對(duì)現(xiàn)有的安全風(fēng)險(xiǎn)評(píng)估標(biāo)準(zhǔn)、評(píng)估模型、評(píng)估方法進(jìn)行了深入的分析,以GB/T 20984-2007《信息安全技術(shù)信息系統(tǒng)的風(fēng)險(xiǎn)評(píng)估規(guī)范》和BS7799等國(guó)內(nèi)外信息安全風(fēng)險(xiǎn)評(píng)估標(biāo)準(zhǔn)為指導(dǎo),結(jié)合海洋數(shù)據(jù)屬性及海洋信息系統(tǒng)特點(diǎn),從而分析和研究海洋信息系統(tǒng)安全因素,提出一套較為全面、客觀的海洋信息系統(tǒng)安全評(píng)估指標(biāo)體系,基于層次分析法對(duì)指標(biāo)體系進(jìn)行定量與定性相結(jié)合的分析,從而篩選對(duì)海洋信息系統(tǒng)安全影響較小的指標(biāo)。最后利用統(tǒng)計(jì)學(xué)中的效度系數(shù)和相關(guān)系數(shù)做出效度和信度檢驗(yàn),證明了本文中的指標(biāo)體系具有一定的有效性和可靠性。其次,本文結(jié)合事故樹和層次分析法在定性和定量分析上的優(yōu)勢(shì),建立了基于改進(jìn)層次分析法的海洋信息安全評(píng)估方法,將事故樹中的結(jié)構(gòu)重要度概念引入到層次分析法的判斷矩陣構(gòu)建過程中,利用結(jié)構(gòu)重要度引出的判斷因子的相互比較關(guān)系來建立判斷矩陣并計(jì)算其權(quán)重,而后,結(jié)合傳統(tǒng)層次分析法計(jì)算出的權(quán)重,進(jìn)而計(jì)算分析得出各因素的綜合權(quán)重。最后,基于改進(jìn)層次分析法的海洋信息安全評(píng)估方法的基礎(chǔ)上,提出海洋信息系統(tǒng)安全評(píng)估模型。該模型第一步是分析評(píng)估系統(tǒng)的安全風(fēng)險(xiǎn)因素;第二步是分別構(gòu)建事故樹和層次分析法的判斷矩陣,計(jì)算各自權(quán)重,再計(jì)算各自的標(biāo)度因子和一致性因子,從而結(jié)合權(quán)重賦值;第三步是利用模糊綜合分析法結(jié)合權(quán)重得出系統(tǒng)的安全等級(jí)評(píng)價(jià),并給出安全改進(jìn)方案。通過實(shí)例應(yīng)用,將本文提出的指標(biāo)體系及安全評(píng)估模型運(yùn)用到實(shí)際海洋信息系統(tǒng)中,并在實(shí)踐中證明該安全評(píng)估模型是切合實(shí)際、可行有效的。最后實(shí)例應(yīng)用計(jì)算及分析結(jié)果表明,本文研究的海洋信息系統(tǒng)安全評(píng)估指標(biāo)及模型能夠滿足實(shí)際評(píng)估工作,并且符合實(shí)際情況。
[Abstract]:China is a great ocean power, and the ocean plays a very important role in the national economy and social development. Especially in recent years, China's marine industrial GDP has basically maintained steady growth. According to preliminary accounting, the gross domestic product of China in 2015 amounted to 6466.9 billion yuan, up by 7% from the previous year. The Shanghai Ocean Bureau and the Shanghai Development Reform Commission also conducted a study on Shanghai's marine development strategy last year, and drafted the Programme of Action on Accelerating the Development of Marine Business in Shanghai (2015-2020). With the strategy of ocean power and "Belt and Road" The promotion of construction, how to strengthen the construction of marine information, improve the protection ability of marine information public services such as forecast reduction, environmental protection and law enforcement, has become a major strategic issue of concern to all parties. Overall, the construction of China's marine informatization has made great progress. For example, China has formulated and improved the national marine information planning, the acquisition and processing capacity of ocean data, the technology has also improved, and China's multi-level marine information service system has been preliminarily formed, and the national marine comprehensive management system has been constructed. The work of marine information security is also increasing. Since most of the marine data belongs to state secrets, any technical vulnerability or improper management of marine information security may have serious consequences for our country's interests, so the information security problem cannot be ignored in the construction of marine information systems. It is understood that the State Oceanic Administration, the provinces and municipalities, the county-level maritime bureau and other relevant maritime units have different security levels for different marine operations. Therefore, the safety risk assessment of marine information system becomes the foundation of the construction of marine information security management mechanism. the effective risk assessment model can judge whether the safety measure construction of the evaluation object system meets the requirement of protecting information asset safety, and meanwhile, the specific safety condition of the whole system can be monitored by using a reasonable model, so that the information security guarantee measures can be adjusted in time, Always keep the risk within an acceptable range and ensure the safety of the entire system at a low cost to the maximum extent. Firstly, this paper deeply analyzes the existing safety risk assessment standard, evaluation model and evaluation method, and guides the information security risk assessment standards at home and abroad in GB/ T 20984-2007 and BS7799. Combined with the characteristics of marine data and marine information system, this paper analyses and studies the safety factors of marine information system, puts forward a comprehensive and objective system of safety assessment of marine information system, and analyses the quantitative and qualitative analysis of index system based on AHP. so as to screen the indexes which have less influence on the safety of the marine information system. Finally, the effectiveness and reliability test of the coefficient and correlation coefficient in statistics are used to prove the effectiveness and reliability of the index system in this paper. Secondly, combining the advantages of accident tree and analytic hierarchy process in qualitative and quantitative analysis, this paper establishes an ocean information security assessment method based on improved AHP, and introduces the concept of structural importance in the accident tree into the decision matrix construction process of AHP. A judgment matrix is established and the weight is calculated by the mutual comparison of the judgment factors derived from the structural importance, and then the weights calculated by the traditional analytic hierarchy process are combined, and then the comprehensive weight of each factor is calculated and analyzed. Finally, on the basis of improving the method of marine information security assessment based on the improved AHP, a model of security assessment of marine information system is proposed. the first step of the model is to analyze the security risk factors of the evaluation system, and the second step is to construct a judgment matrix of the accident tree and the hierarchy analysis method respectively, calculate the respective weights, and then calculate the respective scale factors and the consistency factors, thereby binding the weight assignments; The third step is to use the fuzzy comprehensive analysis method to combine the weight to get the safety class evaluation of the system, and give the safety improvement plan. By means of example application, the index system and safety evaluation model proposed in this paper are applied to the actual marine information system, and in practice it is proved that the safety evaluation model is practical and feasible. The results of the calculation and analysis of the last instance show that the safety assessment index and model of the marine information system studied in this paper can meet the actual assessment work and accord with the actual situation.
【學(xué)位授予單位】：上海海洋大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2016
【分類號(hào)】：P74;TP309

【相似文獻(xiàn)】

相關(guān)期刊論文 前10條

1 黃西安;海洋信息學(xué)簡(jiǎn)介[J];海洋開發(fā)與管理;2004年01期

2 陳伯鏞;傳播海洋信息 發(fā)展海洋事業(yè)——《海洋信息》創(chuàng)刊10周年紀(jì)念[J];海洋信息;1996年02期

3 荊公;聯(lián)合增效,加速海洋信息產(chǎn)業(yè)的發(fā)展[J];海洋信息;1998年05期

4 吳克勤;海洋信息工作的挑戰(zhàn)與機(jī)遇[J];海洋信息;1998年08期

5 陳奎英;興海強(qiáng)國(guó),加快海洋信息化建設(shè)步伐[J];海洋信息;2004年02期

6 何亞文;蘇奮振;杜云艷;肖如林;;海洋信息網(wǎng)格服務(wù)平臺(tái)的設(shè)計(jì)與實(shí)現(xiàn)[J];地球信息科學(xué)學(xué)報(bào);2010年05期

7 周莉;周亞珠;徐蘭芬;韓真;邵艷;;舟山海洋信息資源調(diào)查及開發(fā)[J];海洋信息;2010年04期

8 李雪;;國(guó)家海洋信息中心召開年度工作會(huì)議[J];海洋信息;2006年02期

9 羅續(xù)業(yè);我國(guó)海洋信息聯(lián)機(jī)服務(wù)[J];海洋技術(shù);1996年03期

10 吳克勤;英國(guó)海洋信息系統(tǒng)的開發(fā)[J];海洋信息;2001年02期

相關(guān)重要報(bào)紙文章 前8條

1 集美大學(xué) 謝欽銘;應(yīng)加強(qiáng)海洋信息綜合管理體系建設(shè)[N];中國(guó)海洋報(bào);2006年

2 ;譜寫海洋信息事業(yè)發(fā)展新篇章[N];中國(guó)海洋報(bào);2006年

3 記者 侯小健　通訊員 許小貝 鄧韶勇;我省有了海洋信息專用網(wǎng)絡(luò)[N];海南日?qǐng)?bào);2011年

4 海辛;我國(guó)海洋信息系統(tǒng)國(guó)際先進(jìn)[N];中國(guó)船舶報(bào);2000年

5 張新民;國(guó)家海洋信息中心舉行成立50周年慶典[N];天津日?qǐng)?bào);2008年

6 國(guó)家海洋信息中心 徐勝;改革創(chuàng)新 開創(chuàng)海洋信息工作新局面[N];中國(guó)海洋報(bào);2014年

7 實(shí)習(xí)記者 劉川;我國(guó)首個(gè)海洋信息三維可視化平臺(tái)建成[N];中國(guó)海洋報(bào);2011年

8 國(guó)家海洋信息中心;以“七一”講話、“三個(gè)六”為發(fā)展和創(chuàng)新動(dòng)力[N];中國(guó)海洋報(bào);2011年

相關(guān)碩士學(xué)位論文 前3條

1 邱俊浩;基于Hadoop的海洋信息OLAP與數(shù)據(jù)挖掘系統(tǒng)的研究與實(shí)現(xiàn)[D];東北大學(xué);2014年

2 王t;安全風(fēng)險(xiǎn)評(píng)估模型研究及其在海洋信息系統(tǒng)中的應(yīng)用[D];上海海洋大學(xué);2016年

3 馬飛飛;基于GIS的水聲計(jì)算數(shù)據(jù)環(huán)境設(shè)計(jì)與集成[D];遼寧師范大學(xué);2009年

，

本文編號(hào)：2303327

suoshi