Research On Security Assessment System Of Construction Project Trading Center Information System

With the prosperous development of the market economy,the visible architectural market has entered the golden period of rapid growth.More and more traditional industries began to be aware of the change of the times and accelerate the informatization construction.The information security problems which appeared in the process of informatization has become major issues in the development of global economy.With the development of science and technology,the situation that the weakness and vulnerability of information system is utilized by hackers is strictly intensified.As a trading and management institution of the visible architectural market,construction project trading center has greatly improved the efficiency of transaction and management in the process of informatization construction.But its characteristic of huge trading value,large amounts of information and complex participants has made it faced with serious information security problems.This research introduced the basic situation,main problems and the necessity of information security evaluation of construction project trading center and summarized the basic concept of information security evaluation,information security evaluation standards and methods,the business and elements of construction project trading center and information security evaluation process.On the basis of combining domestic and foreign relevant standards,related theories of information system security(MMEM System Theory,Swiss Cheese Model and SHEL Model),investigation results of construction project trading center and the opinions of relative experts,this research established static and dynamic security assessment index system of construction project trading center information system from the aspects of information system security technology and management.On the basis of the static and dynamic index system,this research established the information system security assessment model through related system engineering methods including analytic hierarchy process(AHP),multistage fuzzy comprehensive evaluation method and expert system.The research results were applied to the information system of H City Construction Project Trading Center and its security status and risk problems were summarized.Through the information system security assessment index system and model,the security risk value of H CityConstruction Project Trading Center has been calculated and information system security strategies were formulated,which provided reference and actual cases for the research of information system security of Construction Project Trading Center.