Index Reduction for Information Systems Security Risk Assessment Based on Rough Set Theory and Hierarchic Analysis

Combining the rough set theory with hierarchic analysis model in view of their characteristics and introducing the definition of importance into non-core attributes, a new data reduction algorithm is proposed using a simple discriminative matrix. The validity and completeness of the algorithm is proved, by which the problem of index reduction for information systems security risk assessment is successfully solved. The results reveal that the algorithm is able to mine the knowledge and simplify the course of risk assessment.