[目的/意义]面对智慧城市日益突出的信息安全问题,提出一个科学的风险评估模型,以快速对智慧城市进行风险分类并分析风险因素。[方法/过程]从智慧城市信息安全的5个层次和风险评估的4个主要因素出发,构建智慧城市信息安全风险指标框架,对智慧城市实例进行Ward系统聚类形成分类属性,选择C4.5算法的决策树方法建立风险评估模型,并验证模型的科学性。[结果/结论]结果发现:安全管理制度、数据泄露与损坏威胁、安全意识薄弱性和设备安全漏洞是智慧城市之间差距最显著的风险因素,根据评估结果提出保障智慧城市信息安全的建议。
[ Purpose/significance] Considering the increasingly prominent information security issues of smart city, a scientific risk assessment model is proposed, which could classify and analyze the risk factors rapidly.[Method/ process ] From five connotations of smart city public service' s information security and four main factors of risk assessment, it constructs a smart city public service' s information security risk index framework. Using the ward method of sys- tematical clustering calculates 12 examples of smart city to form classification properties. Choosing the C4.5 algorithm of decision tree method to establish a model of risk assessment, and verify that the model is scientific. [ Result/conclusion] It finds that the safety management system, data leak and the threat of damage, safety awareness' weakness and equip- ment security vulnerabilities is the most significant risk factors' gap between wisdom cities, according to the results of the assessment, making recommendations to protect the information safety of wisdom city.