RESEARCH AND APPLICATION OF INDUSTRIAL SCADA SECURITY RISK ASSESSMENT METHOD BASED ON FUZZY AHP

Xiao Yang,Li Yang,Zichun Yang

DOI: https://doi.org/10.3969/j.issn.1000-386x.2017.05.010

2017-01-01

Abstract:The security defense of supervisory control and data acquisition (SCADA) is paid more and more attention, and risk assessment is an important ways to prevent the occurrence of accident risk and ensure its security.In order to solve the problem of the traditional assessment method and the human factors, an SCADA system security risk assessment method based on fuzzy comprehensive evaluation is proposed.Firstly, the safety assessment index system is established, then the influence of the subordinate system between the three levels of the criteria layer, the index layer and the target layer on the weights of the superiors is obtained through the analytic hierarchy process.Then through the expert scoring method, combined with the fuzzy mathematics theory, the membership function is adopted to get the security membership degree of each index, and finally the multilevel evaluation of the multidimensional and multi-factor is realized.The experimental results show that the fuzzy comprehensive evaluation can solve the problem of quantitative and qualitative mutual conversion, so that the assessment method can be more consistent with the actual situation,thereby improving the accuracy of safety assessment.It also enables site staff to make more correct decision about SCADA system safety, thereby increasing productivity and reducing the probability of accidents as much as possible,while benefiting the business as well as the nation.