Fuzzy OWA Model for Information Security Risk
Management

Ya. N. Imamverdiev and S. A. Derakshande

Institute of Information Technologies, Azerbaijan National Academy of Sciences,
ul. F. Agaeva 9, Baku, AZ 1141 Azerbaijan

E-mail: yadigar@lan.ab.az, smdk364@yahoo.com

Received August 23, 2010; in final form, September 20, 2010

Abstract—One of the methods for information security risk assessment is the substantiated choice and
realization of countermeasures against threats. A situational fuzzy OWA model of a multicriteria deci-
sion making problem concerning the choice of countermeasures for reducing information security risks
is proposed. The proposed model makes it possible to modify the associated weights of criteria based on
the information entropy with respect to the aggregation situation. The advantage of the model is the con-
tinuous improvement of the weights of the criteria and the aggregation of experts’ opinions depending
on the parameter characterizing the aggregation situation.

Keywords: risk processing, risk assessment, information security, OWA operator, multicriteria decision
making problem

DOI: 10.3103/S0146411611010056

Pleiades Publishing home page | journal home page | top

If you have any problems with this server, contact webmaster.