Journal of Information Security Reserach ›› 2024, Vol. 10 ›› Issue (7): 634-.

Previous Articles     Next Articles

Baseline Evaluation of Financial Data Security Based on  Combined WeightingTOPSIS Method

Chen Cong, Hou Jian, Zhang Yanjun, and Wang Yijun   

  1. (Research and Development Center, Beijing Unionpay Card Technology Co., Ltd., Beijing 100141)
    (Bank Card Test Center, Beijing 100141)
  • Online:2024-07-14 Published:2024-07-18

基于组合赋权-TOPSIS方法的金融数据安全基线评价

陈聪侯建张艳君王逸君   

  1. (北京银联金卡科技有限公司研发中心北京100141)
    (银行卡检测中心北京100141)
  • 通讯作者: 侯建 硕士,研究员.主要研究方向为密码学、金融数据安全、数据治理. 1743069423@qq.com
  • 作者简介:陈聪 博士,研究员.主要研究方向为数据安全、数据治理、金融科技安全应用. chencong253@126.com 侯建 硕士,研究员.主要研究方向为密码学、金融数据安全、数据治理. 1743069423@qq.com 张艳君 硕士,研究员.主要研究方向为数据安全、金融数据安全治理. zhangyanjunbuaa@163.com 王逸君 研究员.主要研究方向为大数据安全、数据治理. 1369908990@qq.com

Abstract: The precise identification and verification of the data security baseline are fundamental prerequisites for the implementation of protective measures for financial data security. This process is a foundational reference for the subsequent systematic development of data security and the judicious utilization of data value. Therefore, this paper introduces a model for identifying and verifying the financial data security baseline based on the Combined WeightingTOPSIS method. Initially, based on national laws and regulations, national and industry technical standards, this paper establishes a data security baseline system by analyzing and identifying the main factors and key indicators that affect financial data security. Subsequently, the Analytic Hierarchy Process (AHP) and the Criteria Importance Though Intercrieria Correlation (CRITIC) are comprehensively used to calculate the subjective and objective comprehensive weights of each indicator. Finally, through the application of the Technique for Order of Preference by Similarity to Ideal Solution (TOPSIS), a comprehensive analysis of the efficacy of the financial data security baseline is conducted, coupled with a judicious verification process. Validation through practical instances attests to the rational construction of the indicator system. Moreover, the financial data security baseline identification and verification model, grounded in the Combined WeightingTOPSIS method and operating within a multidimensional indicator system, demonstrates superior scientific efficacy and adaptability to realworld industry applications. Comparative experiments with alternative models further underscore the accuracy and effectiveness of the proposed indicator system and verification method in this paper.

Key words: data security protection, financial data, data security baseline, identification and verification of security baseline, AHP, TOPSIS

摘要: 清晰准确地识别和验证数据安全基线是开展金融数据安全保护的前提和基础,也是后续有序开展数据安全建设、数据价值利用的基准参照.因此,提出了一种基于组合赋权TOPSIS方法的金融数据安全基线评价模型.首先,依据国家法律法规、国家及行业技术标准,分析并识别影响金融数据安全的主要因素和关键指标,建立数据安全基线体系;其次,综合运用层次分析法(AHP)与客观赋权法(CRITIC),计算出各项指标的主客观综合权重;最后,利用理想解逼近方法(TOPSIS),实现对金融数据安全基线应用效果的综合分析和合理验证.实例验证证明,该指标体系构建合理,且多维指标体系下基于组合赋权TOPSIS方法的金融数据安全基线识别与验证模型更加科学有效,更易适配行业应用的实际情况.同时,通过与其他模型进行对比实验,进一步证明该指标体系与验证方法的正确性和有效性.

关键词: 数据安全保护, 金融数据, 数据安全基线, 安全基线识别与验证, AHP法, TOPSIS法

CLC Number: