CN101488168B - Integrated risk computing method and system of computer information system - Google Patents
Integrated risk computing method and system of computer information system Download PDFInfo
- Publication number
- CN101488168B CN101488168B CN2008100563580A CN200810056358A CN101488168B CN 101488168 B CN101488168 B CN 101488168B CN 2008100563580 A CN2008100563580 A CN 2008100563580A CN 200810056358 A CN200810056358 A CN 200810056358A CN 101488168 B CN101488168 B CN 101488168B
- Authority
- CN
- China
- Prior art keywords
- risk
- reliability
- key element
- original
- assessment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Abstract
The invention relates to a method and a system for integrated risk calculation of a computer information system, comprising the following functional modules: an original factor initial risk reliability valuator forms original factor initial risk reliability vector and a comprehensive risk reliability calculator connected with the original factor initial risk reliability valuator for calculating and evaluating the comprehensive risk reliability of the object; the method comprises the following steps: building risk level standard, analyzing the object and building weight, evaluating the original factor initial risk reliability, building risk reliability matrix, calculating the comprehensive risk reliability and quantizing the comprehensive risk. Evaluation factors are used as evidence of the evaluation object, and the risk of the evaluation object is calculated with an evidence synthesis method; the result of the evaluation factors is synthesized from the angle of the evidence, so as tobe capable of directly expressing the uncertain or unknown factors in the evaluating process, and the information is kept in the synthesis process of the evaluation factors, thus leading the evaluation result to be more objective and real.
Description
Technical field
The invention belongs to information security field, be specifically related to a kind of computer information system integrated risk computing method and system.
Background technology
Along with the continuous development of infotech with popularize, the risk assessment of infosystem also occupies more and more important position.In the evaluation process of reality, the appraiser usually is the method for adopt resolving, and the evaluation object of complexity is divided into several relatively simply assesses key element, then by the assessment result of each assessment key element, extrapolates the risk of evaluation object.Because the current computer infosystem all is the complication system that network is formed usually, therebetween between each assembly, and interrelated between assembly and the system, exist safety to rely on.Because the uncertainty of this each association makes to have considerable randomness, ambiguity and subjective random that in evaluation process it is convincing to cause last assessment result to be difficult to.
In order to express the uncertainty in the evaluation process, factors such as subjective randomness when minimizing will be assessed plain synthesizing, invention " a kind of computer information safe fuzzy risk evaluating system and method " (application number 200710303984.0) had once proposed a kind of safety evaluation method of quantification, this invention has been given the appraisal procedure that a kind of fuzzy risk on the analysable basis of evaluation object.If an evaluation object can resolve to some assessment key elements, the appraisal procedure of this invention comprises:
1. assess the fuzzy risk matrix computations of key element.According to the user risk of assessment key element is judged, calculated the fuzzy rank subjection degree matrix of assessment key element.
2. according to the weight vectors of fuzzy risk matrix and assessment key element, calculate the comprehensive fuzzy risk of evaluation object.
3. according to comprehensive fuzzy risk, and the risk class standard set up of user, the risk of quantitative evaluation object.
Invention " a kind of computer information safe fuzzy risk evaluating system and method " (application number 200710303984.0) fully takes into account the uncertainty in the evaluation process, finish assessing the synthetic of key element by fuzzy technology, reduced the subjective randomness in the building-up process.But, when carrying out assessment factor synthetic with the Fuzzy Calculation technology, exist the character of " uncertain " or " not knowing " but to fail to embody well in the evaluation process.
The present invention proposes a kind of safety evaluation method and system based on the reliability theory.From the angle of evidence the result who assesses key element is synthesized.Thereby can directly express evaluation process in the ability of " uncertain " or " not knowing ", and in the building-up process of assessment key element, keep these information.
Summary of the invention
The present invention is directed to the uncertainty of the middle existence of evaluation process, provide a kind of system and method that calculates integrated risk from the angle of evidence theory, is that to invention " a kind of computer information safe fuzzy risk evaluating system and method " replenishes.Concrete summary of the invention comprises:
A kind of computer information system integrated risk computing system according to the risk evaluation and test of original factor, calculates the risk reliability of total system.Comprise following functional module:
1) original factor initial risks reliability valuator, the initial risks reliability vector of formation original factor.
2) the integrated risk reliability counter that is connected with original factor initial risks reliability valuator, the integrated risk reliability of calculating evaluation object.
Original factor initial risks reliability valuator is connected with integrated risk reliability counter, and the former output is as the latter's input.
Original factor initial risks reliability valuator wherein is according to the evaluation and test to original assessment key element, to the reliability assignment of original assessment key element with respect to set risk class standard.It comprises with lower device:
1) input media is imported the initial risks assessed value s of original assessment key element and risk class standard vector D.
2) the initial risks reliability calculation element that is connected with input media according to the initial risks assessed value of original assessment key element, calculates the initial risks reliability vector of an original assessment key element.
3) output unit that is connected with initial risks reliability calculation element, the initial risks reliability vector of an original assessment key element of output.
Integrated risk reliability counter wherein according to the risk reliability matrix of all assessment key elements and the weight vectors of assessment key element, calculates the integrated risk reliability of evaluation object.It comprises with lower device:
1) risk reliability matrix input media, the risk reliability matrix R of input assessment key element.When assessment key element when being original assessment key element, risk reliability matrix R is the matrix that the initial risks reliability vector of initial risks reliability valuator output is formed.
2) the weight vectors input media of assessment key element, the weight of all assessment key elements of an evaluation object of input.
3) the integrated risk computer installation that is connected with the weight vectors input media of risk reliability matrix input media and assessment key element is finished the calculating of the integrated risk reliability of evaluation object.
4) the risk reliability of the evaluation object that is connected with integrated risk computer installation vector output unit is exported 1 * n matrix (b
1, b
2..., b
n).b
iThe risk of expression evaluation object belongs to the trusting degree of rank i, and n represents the sum of risk class.
A kind of computer information system integrated risk computing method may further comprise the steps:
Set up the risk class standard, object is resolved and is set up weight, and original factor initial risks reliability assignment is set up risk reliability matrix, calculates the integrated risk reliability and quantizes integrated risk.
The calculating of integrated risk reliability may further comprise the steps:
If the risk reliability matrix of all assessment key elements of an evaluation object is R=(r
I, j)
K * n, the weight vectors W=(w of assessment key element
1..., w
k), wherein n represents the risk class number preset, k represents the number of the assessment key element that this evaluation object has.Then the integrated risk of evaluation object is matrix B={ b of a 1 * n
1, b
2..., b
n, b
jRepresent the reliability of last comprehensive assessment for i risk class.B wherein
jComputing method as follows:
Wherein
It is normalized factor.
Original factor initial risks reliability assignment method step, carry out initial risk reliability by following method and assign:
After dividing for evaluated system, each assessment key element that can not cut apart again at last is referred to as original factor, and the risk reliability of these original factor is called the initial risks reliability.Can use the instrument resemble the vulnerability scanning that original factor is carried out safe evaluation and test, risk assessment value s (such as the CVE score value) normalization with the original assessment key element that obtains makes it to become the decimal between [0,1].Compare with the risk class standard value of setting again, find out two adjacent standard value d in two rank standards
xAnd d
y, make that the risk s value after the normalization satisfies d
x≤ s≤d
yThis original factor is for rank standard d then
iThe initial risks reliability assign by following method:
The initial risks reliability vector of the original assessment key element of all of an evaluation object is formed the risk reliability matrix of this assessment key element.
Risk assessment or judgement to infosystem belong to uncertainty decision problem.When a plurality of assessment factor weave in, just need synthesize, thereby can cause probabilistic propagation of evaluation process inevitably the assessment result of these assessment factors.Simple score value adds up and asks the way of arithmetic mean, obviously can not meet the demands.Invention " a kind of computer information safe fuzzy risk evaluating system and method " (application number 200710303984.0) is though admit the uncertainty that exists in the evaluation process with the technology of bluring, and used method is failed to make uncertainty in the evaluation process to keep well or propagated when assessment result synthetic.Reliability is more pressed close to the judgement of expert to uncertainty event in the evidence theory, thereby the uncertainty decision-making available evidence theory in the assessment is represented, and synthesize with the rule in the evidence theory, make and can see the distribution that uncertain incident is judged from fusion results.The present invention synthesizes the result who assesses key element from the angle of evidence, can directly express evaluation process in the factor of " uncertain " or " not knowing ", and in the building-up process of assessment key element, keep these information, thereby make assessment result objective reality more.
Description of drawings
Fig. 1 is the annexation synoptic diagram between original factor initial risks reliability valuator of the present invention and the integrated risk reliability counter.
Fig. 2 is to be the tree-shaped analytic structure synoptic diagram of evaluation object.
Fig. 3 utilizes the present invention to carry out workflow being evaluated journey figure.
Fig. 4 utilizes original factor initial risks reliability valuator structural drawing of the invention process.
Fig. 5 utilizes integrated risk reliability calculator structure figure of the invention process.
The present invention is further described below in conjunction with drawings and Examples.
Embodiment
Concrete grammar and step that embodiment 1. utilizes the present invention to carry out risk assessment, as shown in Figure 3.
1. step 301 is set up the risk class standard:
7 fens position rank standards supposing the definition risk are as shown in table 1.
Table 1: risk class standard
| The rank factor | Rank marking | Describe |
| 0 | d 1 | Can ignore.The generation of risk case is to almost not influence of system |
| 0.1 | d 2 | Small.Influential but very little.Risk case is in case generation causes 10% Value Loss at the most. |
| 0.3 | d 3 | Obvious slightly.Can feel the variation that causes system, but not really serious.Risk case is in case generation causes 30% Value Loss at the most. |
| 0.5 | d 4 | Medium.Can cause the infringement of system's popularity, or, need payment valuable source upkeep cost the reduction of system resource or service trust degree.Risk case is in case generation can cause 50% Value Loss. |
| 0.7 | d 5 | Seriously.Can cause the interruption of important system, commercial trust is impaired.Risk case is in case generation may cause 70% Value Loss. |
| 0.9 | d 6 | Very serious.Can cause the important system interruption, or customer service or commercial trust heavy losses.Risk case is in case generation may cause 90% Value Loss. |
| 1 | d 7 | Crucial.Can cause that system continues to interrupt or forever close.Can cause the heavy losses of proxy information or service.In a single day risk case takes place, and Value Loss is near 100%. |
2. weight vectors is resolved and set up to step 302 object:
Generally speaking, the infosystem that assess is a system ensemble of being made up of a plurality of modules.By principle from simple to complexity, when assessment, earlier evaluation object is decomposed, be broken down into several relatively independent assessment key elements.In general, when an evaluation object being parsed into several assessment key elements, each significance level of assessing between the key element should be unable to be identical.At this moment just need determine the weight between the different assessment key elements.In the assessment of each assessment key element, calculate the importance weight of these assessment key elements by analytical hierarchy process.If k assessment key element arranged, then obtain the weight vectors W={w of a k dimension
1, w
2..., w
k, wherein
Form the tree structure of whole infosystem at last, as shown in Figure 2.
3. step 303 is set up initial risks reliability matrix:
Each original factor is assessed, can be used common leak assessment tool to evaluate and test,,, make it to become the decimal between [0,1] earlier with its normalization with the CVE safety score value s that obtains.Compare with the risk class standard value of setting again, find out two adjacent d
xAnd d
y, make that the risk s value after the normalization satisfies d
x≤ s≤d
yThis will have for rank standard d then
iCarry out the reliability assignment by following method:
Suppose to adopt the risk class standard { d of 7 fens positions
1, d
2..., d
7}={ 0,0.1,0.3,0.5,0.7,0.9,1}, if the CVE score value s=7.6 of a key element, and the best result of CVE is 10, then the normalization result of this key element is 0.76, the back is between d
5=0.7 and d
6Between=0.9, so the risk reliability vector of this key element 0,0,0,0,0.7,0.3,0}.The risk reliability vector of all assessment key elements of an evaluation object altogether, form the risk reliability matrix of this evaluation object.
4. step 304 is calculated the integrated risk reliability:
After carrying out the individual event assessment and being equipped with weight, can obtain a risk reliability matrix R=(r of all assessment key elements of an evaluation object
I, j)
K * nAnd weight vectors W=(w
1..., w
k).For 7 fens position risk class standards of supposition, then the integrated risk reliability of this evaluation object is matrix B={ b of one 1 * 7
1, b
2, b
3, b
4, b
5, b
6, b
7, b
jRepresent the reliability of last comprehensive assessment for i risk class.B wherein
jComputing method as follows:
Wherein
It is normalized factor.
Repeated for the 4th step, calculate up to integrated risk reliability root node.
5. step 305 quantizes integrated risk:
If final comprehensive assessment result is quantized, then calculate U=B * D, as the numerical result of a final integrated risk, D={0 wherein, 0.1,0.3,0.5,0.7,0.9,1}
TIt is risk class definition (column vector is referring to table 1).
In the superincumbent definition,, relevant dependence and significance level between each evaluation object are synthesized, thereby obtain the evaluation result of comprehensive object by risk reliability matrix and weight matrix.It should be noted that when the result to each assessment synthesizes, if normalized factor K=0, then can not be synthetic with this method, just consider to use other method this moment.
The enforcement (as Fig. 4) of embodiment 2. original factor initial risks reliability valuators.This valuator is according to the evaluation and test to original assessment key element, to the reliability assignment of original assessment key element with respect to set risk class standard.It comprises with lower device:
1) input media 401, import the initial risks assessed value s of original assessment key element, and risk class standard vector D.
2) initial risks reliability calculation element 402 according to the initial risks assessed value of original assessment key element, calculates the initial risks reliability vector of an original assessment key element.
2) output unit 403, the initial risks reliability vector of an original assessment key element of output.
Suppose to adopt the risk class standard { d of 7 fens positions
1, d
2..., d
7}={ 0,0.1,0.3,0.5,0.7,0.9,1}, if the CVE score value s=7.6 of a key element, then the reception of input media 401 is input as s=7.6, D={0,0.1,0.3,0.5,0.7,0.9,1}.
After input media 401 being received the assessed value s and risk class standard vector D of a key element, initial risks reliability calculation element 402 carries out initial risks reliability assignment by following method to this assessment key element: earlier with its normalization of s, become the decimal between [0,1].Compare with the risk class value of setting again, find out two adjacent d
xAnd d
y, make that the risk s value after the normalization satisfies d
x≤ s≤d
yThis key element is for rank standard d then
iCarry out the reliability assignment by following method:
For D={0,0.1,0.3,0.5,0.7,0.9,1}, s=7.6, if the best result of CVE is 10, then the result after the s normalization is 0.76, between d
5=0.7 and d
6Between=0.9, so the risk reliability matrix of this key element is that { 0,0,0,0,0.7,0.3,0} is an initial risks reliability vector.
After the initial risks reliability vector calculation of all original assessment key elements of an evaluation object finishes, the initial risks reliability matrix that output unit 403 outputs are made up of these initial risks reliabilities vectors.
Embodiment 3, the enforcement (as Fig. 5) of integrated risk reliability counter.This counter calculates the integrated risk reliability of evaluation object according to the risk reliability matrix of all assessment key elements and the weight vectors of assessment key element.It comprises with lower device:
1) risk reliability matrix input media 501, the risk reliability matrix R of input assessment key element.When assessment key element when being original assessment key element, risk reliability matrix R is the initial risks reliability matrix of initial risks reliability valuator output.
2) the weight vectors input media 502 of assessment key element, the weight of all assessment key elements of an evaluation object of input.
3) the integrated risk computer installation 503, finish the calculating of the integrated risk reliability of evaluation object.
4) the risk reliability of evaluation object vector output unit 504 is exported 1 * n matrix (b
1, b
2..., b
n).b
iThe risk of expression evaluation object belongs to the trusting degree of rank i, and n represents the sum of risk class.
The input media 501 and 502 of this counter is imported the risk reliability matrix R of the assessment key element of an evaluation object respectively, and the weight vectors of assessment key element.When assessment key element when being original assessment key element, risk reliability matrix R is the initial risks reliability matrix of initial risks reliability valuator output.
After input media 501 and 502 was finished input, integrated risk computer installation 503 calculated the integrated risk reliability of an evaluation object by following method:
For 7 fens position risk class standards of supposition, then the integrated risk reliability of this evaluation object is matrix B={ b of one 1 * 7
1, b
2, b
3, b
4, b
5, b
6, b
7, b
jRepresent the reliability of last comprehensive assessment for i risk class.B wherein
jComputing method as follows:
Wherein
It is normalized factor.
The risk reliability vector output unit 504 of evaluation object is with the result of calculation output of integrated risk computer installation 503.
In calculating integrated risk, if K=0 then calculates meaninglessly, expression can not be with method calculating integrated risk reliability of the present invention.
Claims (3)
1. a computer information system integrated risk computing system is characterized in that the risk evaluation and test according to original factor, calculates the risk reliability of total system; Comprise following functional module:
1) original factor initial risks reliability valuator, the initial risks reliability vector of formation original factor;
2) the integrated risk reliability counter that is connected with original factor initial risks reliability valuator, the integrated risk reliability of calculating evaluation object;
Original factor initial risks reliability valuator is connected with integrated risk reliability counter, the former output is as the latter's input, wherein, described original factor initial risks reliability valuator, according to evaluation and test, to the reliability assignment of original assessment key element with respect to set risk class standard to original assessment key element; It comprises with lower device:
1) input media is imported the initial risks assessed value s of original assessment key element and risk class standard vector D;
2) the initial risks reliability calculation element that is connected with input media according to the initial risks assessed value of original assessment key element, calculates the initial risks reliability vector of an original assessment key element;
3) output unit that is connected with initial risks reliability calculation element, the initial risks reliability vector of an original assessment key element of output,
Described integrated risk reliability counter according to the risk reliability matrix of all assessment key elements and the weight vectors of assessment key element, calculates the integrated risk reliability of evaluation object; It comprises with lower device:
1) risk reliability matrix input media, the risk reliability matrix R of input assessment key element, when the assessment key element was original assessment key element, risk reliability matrix R was exactly the matrix of being made up of the initial risks reliability vector of initial risks reliability valuator output;
2) the weight vectors input media of assessment key element, the weight of all assessment key elements of an evaluation object of input;
3) the integrated risk computer installation that is connected with the weight vectors input media of risk reliability matrix input media and assessment key element is finished the calculating of the integrated risk reliability of evaluation object;
4) the risk reliability of the evaluation object that is connected with integrated risk computer installation vector output unit is exported 1 * n matrix (b
1, b
2..., b
n); b
iThe risk of expression evaluation object belongs to the trusting degree of rank i, and n represents the sum of risk class.
2. computer information system integrated risk computing method is characterized in that may further comprise the steps: set up the risk class standard, object is resolved and is also set up weight, original factor initial risks reliability assignment, set up risk reliability matrix, calculate the integrated risk reliability and quantize integrated risk
Wherein, described risk class standard is the numerical value of one group of value in [0,1], risk class of each numeric representation,
Wherein, in original factor initial risks reliability assignment step,, carry out initial risk reliability by following step and assign for original factor:
After dividing for evaluated system, each assessment key element that can not cut apart again at last is referred to as original factor, and the risk reliability of these original factor is called the initial risks reliability; Use the vulnerability scanning instrument that original factor is carried out safe evaluation and test, the risk assessment value s normalization with the original assessment key element that obtains makes it to become the decimal between [0,1]; Compare with the risk class standard of setting again, find out two adjacent standard value d
xAnd d
y, make that the risk assessment value s after the normalization satisfies d
x≤ s≤d
y, wherein, d
x, d
yBe two adjacent class values in the risk class standard; This original factor is for rank standard d then
iThe initial risks reliability assign by following method:
In described integrated risk reliability calculation procedure, calculate the reliability of the integrated risk of evaluation object by following step:
If the risk reliability matrix of all assessment key elements of an evaluation object is R=(r
I, j)
K * n, the weight vectors W=(w of assessment key element
1..., w
k), wherein n represents the risk class number preset, and k represents the number of the assessment key element that this evaluation object has, and then the integrated risk of evaluation object is matrix B={ b of a 1 * n
1, b
2..., b
n, b
jRepresent the reliability of last comprehensive assessment for i risk class; B wherein
jComputing method as follows:
Wherein
It is normalized factor.
3. a kind of computer information system integrated risk computing method as claimed in claim 2 is characterized in that: described risk assessment value s is the CVE score value.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2008100563580A CN101488168B (en) | 2008-01-17 | 2008-01-17 | Integrated risk computing method and system of computer information system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2008100563580A CN101488168B (en) | 2008-01-17 | 2008-01-17 | Integrated risk computing method and system of computer information system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101488168A CN101488168A (en) | 2009-07-22 |
| CN101488168B true CN101488168B (en) | 2011-06-22 |
Family
ID=40891056
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2008100563580A Expired - Fee Related CN101488168B (en) | 2008-01-17 | 2008-01-17 | Integrated risk computing method and system of computer information system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101488168B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| RU2477929C2 (en) * | 2011-04-19 | 2013-03-20 | Закрытое акционерное общество "Лаборатория Касперского" | System and method for prevention safety incidents based on user danger rating |
| WO2013084779A1 (en) * | 2011-12-06 | 2013-06-13 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Method, device, and computer program for visualizing risk assessment valuation of sequence of events |
| CN102609778B (en) * | 2012-02-17 | 2015-02-11 | 广东省电力调度中心 | Method and device for assessing risk of electric power communication network |
| US10154046B2 (en) * | 2015-12-28 | 2018-12-11 | Schneider Electric USA, Inc. | System and method for evaluation and response to cyber security exposure in an embedded control device |
| CN106096423B (en) * | 2016-08-22 | 2018-12-14 | 浪潮电子信息产业股份有限公司 | A kind of method of dynamic evaluation operating system security index |
| CN110138627B (en) * | 2019-07-11 | 2019-09-20 | 电子科技大学 | A kind of edge side terminal security access strategy selection method based on security risk quantization |
| CN110704848B (en) * | 2019-09-27 | 2022-06-10 | 阿波罗智联(北京)科技有限公司 | Vulnerability quantitative evaluation method and device |
| CN110866259A (en) * | 2019-11-14 | 2020-03-06 | 杭州安恒信息技术股份有限公司 | Method and system for calculating potential safety hazard score based on multi-dimensional data |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2005286401A (en) * | 2004-03-26 | 2005-10-13 | Bank Of Tokyo-Mitsubishi Ltd | Computer system and electronic authentication policy agent service providing method |
| CN1741472A (en) * | 2005-09-05 | 2006-03-01 | 北京启明星辰信息技术有限公司 | Network invading event risk evaluating method and system |
| CN1981289A (en) * | 2004-07-13 | 2007-06-13 | 国际商业机器公司 | Methods, computer program products and data structures for intrusion detection, intrusion response and vulnerability remediation across target computer systems |
-
2008
- 2008-01-17 CN CN2008100563580A patent/CN101488168B/en not_active Expired - Fee Related
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2005286401A (en) * | 2004-03-26 | 2005-10-13 | Bank Of Tokyo-Mitsubishi Ltd | Computer system and electronic authentication policy agent service providing method |
| CN1981289A (en) * | 2004-07-13 | 2007-06-13 | 国际商业机器公司 | Methods, computer program products and data structures for intrusion detection, intrusion response and vulnerability remediation across target computer systems |
| CN1741472A (en) * | 2005-09-05 | 2006-03-01 | 北京启明星辰信息技术有限公司 | Network invading event risk evaluating method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101488168A (en) | 2009-07-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101488168B (en) | Integrated risk computing method and system of computer information system | |
| CN109657947B (en) | Enterprise industry classification-oriented anomaly detection method | |
| Cubbin et al. | Regression versus data envelopment analysis for efficiency measurement: an application to the England and Wales regulated water industry | |
| CN101470779A (en) | Fuzzy risk evaluation system and method for computer information security | |
| Bastos et al. | Traffic fatality indicators in Brazil: State diagnosis based on data envelopment analysis research | |
| Hoti et al. | Structure and asymptotic theory for multivariate asymmetric volatility: Empirical evidence for country risk ratings | |
| Chen et al. | Bid evaluation in civil construction under uncertainty: A two-stage LSP-ELECTRE III-based approach | |
| CN103793854A (en) | Multiple combination optimization overhead transmission line operation risk informatization assessment method | |
| CN103336869A (en) | Multi-objective optimization method based on Gaussian process simultaneous MIMO model | |
| CN103366123A (en) | Software risk assessment method based on defect analysis | |
| CN103984623A (en) | Software security risk assessment method based on defect detection | |
| CN103577876A (en) | Credible and incredible user recognizing method based on feedforward neural network | |
| Parkan et al. | Operational competitiveness analysis on software development | |
| CN111861238A (en) | Expressway bridge engineering risk assessment method and device and computer equipment | |
| Higgoda et al. | Air passenger movements and economic growth in Sri Lanka: Co-integration and causality analysis | |
| Jann | Multinomial goodness-of-fit: Large-sample tests with survey design correction and exact tests for small samples | |
| Hoyle et al. | Optimal experimental design of human appraisals for modeling consumer preferences in engineering design | |
| CN112784277B (en) | Software credibility comprehensive evaluation method based on improved D-S evidence theory | |
| CN103970651A (en) | Software architecture safety assessment method based on module safety attributes | |
| Gurmu et al. | Modelling customers' perception of the quality of services provided by builders: A case of Victoria, Australia | |
| Chawla et al. | ‘AERB’: Developing AIRB PIT-TTC PD Models Using External Ratings | |
| Genriha et al. | Entrepreneurship insolvency risk management: a case of Latvia | |
| Busu et al. | Modeling the predictive power of the singular value decomposition-based entropy. Empirical evidence from the Dow Jones Global Titans 50 Index | |
| Velikova et al. | Decision trees for monotone price models | |
| CN110599230B (en) | Second-hand car pricing model construction method, pricing method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C17 | Cessation of patent right | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20110622 Termination date: 20140117 |