Through advancing in information and communications technology, Smart Cities provide many potential advantages like improved energy efficiency, new economic opportunities and management methods, however the information security in the top-level design of building a quite efficient smart city is easy to be ignored and caused a huge economic losses for citizens. We focus on mining information risks of smart city from the perspective of system, identifying the key risks and determining the importance of each factor, in order to measure the risk accurately. This paper presents a failure mode and effects analysis (FMEA) method to analyze five dimensions of the information security of smart city, and assess the risks on the basis of the fuzzy set theory and the grey relational theory. Due to the problem is the risk assessment of multi-dimension for an organization information security, we present a decision model that provides an efficient framework for calculating the value of risk assessment. The results indicate that aspects of the highest importance of the information security risk of smart city are the threats in natural, contrived and physical aspects, followed by the lack of public security education and training. Through the analysis we can find out the relationship between the failure modes and the overall situation of the system, then it can distinguish the main factors which play a driving role, and the secondary factors which have less impact on the system. According to the assessment results, some suggestions are put forward to guarantee the information security of smart city. The practical application of fuzzy and grey FMEA proposed in this paper helps enhance the reliability of the prediction, and the ranking of risk factors can be used for better decision-making concerning taking measures, which in turn will make smart city safer.
AbdelgawadM. and FayekA.R., Risk management in the construction industry using combined fuzzy FMEA and fuzzy AHP, Journal of Construction Engineering and Management136(9) (2010), 1028–1036.
2.
BeltonV. and StewartT.J., Multiple criteria decision analysis: An integrated approach, Kluwer Academic Publishers, Boston; 2002.
3.
BennettS.P. and KailayM.P., An application of qualitative risk analysis to computer security for the commercial sector, Computer Security Applications Conference (1992), 64–73.
4.
ChatterjeeK. and KarS., Unified Granular-number based AHP-VIKOR multi-criteria decision framework, Granular Computing2(3) (2017), 199–221.
5.
ChenS.M. and ChenC.D., Handling forecasting problems based on high-order fuzzy logical relationships, Expert Systems with Applications38(4) (2011), 3857–3864.
6.
ChenS.M., A fuzzy reasoning approach for rule-based systems based on fuzzy logics, IEEE Transactions on Systems, Man, and Cybernetics-Part B: Cybernetics26(5) (1996), 769–778.
7.
ChenS.M. and ChangT.H., Finding multiple possible critical paths using fuzzy PERT, IEEE Transactions on Systems, Man, and Cybernetics-Part B: Cybernetics31(6) (2001), 930–937.
8.
ChenS.M. and ChienC.Y., Parallelized genetic colony systems for solving the traveling salesman problem, Expert Systems with Applications38(4) (2011), 3873–3883.
9.
ChenS.M. and ChungN.Y., Forecasting enrollments of students by using fuzzy time series and genetic algorithms, International Journal of Information and Management Sciences17(3) (2006), 1–17.
10.
ChenS.M. and HongJ.A., Multicriteria linguistic decision making based on hesitant fuzzy linguistic term sets and the aggregation of fuzzy sets, Information Sciences286(2014), 63–74.
11.
ChenS.M. and KaoP.Y., TAIEX forecasting based on fuzzy time series, particle swarm optimization techniques and support vector machines, Information Sciences247(2013), 62–71.
12.
ChenS.M., WangN.Y. and PanJ.S., Forecasting enrollments using automatic clustering techniques and fuzzy logical relationships, Expert Systems with Applications36(8) (2009), 11070–11076.
13.
ChungC.J., Using likelihood ratio functions for modeling the conditional probability of occurrence of future landslides for risk assessment, Computers and Geosciences32(8) (2006), 1052–1068.
14.
DasS., KarS. and PalT., Robust decision making using intuitionistic fuzzy numbers, Granular Computing2(1) (2017), 41–54.
15.
DengJ.L., Control problems of grey systems, Systems and Control Letters1(5) (1982), 288–294.
16.
ElmaghrabyA.S. and LosavioM.M., Cyber security challenges in Smart Cities: Safety, security and privacy, Journal of Advanced Research5(4) (2014), 491–497.
17.
FukuzawaY., SamejimaM. and UjitaH., Survey on Risk Management Based on Information Security Psychology, International Conference on Human-Computer Interaction, 2015, 396–408.
HorngY.J., ChenS.M., ChangY.C. and LeeC.H., A new method for fuzzy information retrieval based on fuzzy hierarchical clustering and fuzzy inference techniques, IEEE Transactions on Fuzzy Systems13(2) (2005), 216–228.
20.
JiangY., XuZ. and ShuY., Interval-valued intuitionistic multiplicative aggregation in group decision making, Granular Computing2(4) (2017), 387–407.
21.
JinJ., GubbiJ., MarusicS. and PalaniswamiM., An information framework for creating a smart city through internet of things, IEEE Internet of Things Journal1(2) (2007), 112–121.
22.
KozuchB. and Sienkiewicz-MalyjurekK., New requirements for managers of public safety systems, Procedia-Social and Behavioral Sciences149(2014), 472–478.
23.
KuoY., YangT. and HuangG.W., The use of grey relational analysis in solving multiple attribute decision- making problems, Computers and Industrial Engineering55(1) (2008), 80–93.
24.
LeeJ.H., HancockM.G. and HuM.C., Towards an effective framework for building smart cities: Lessons from Seoul and San Francisco, Technological Forecasting and Social Change89(2014), 80–99.
25.
LiuH.C., ChenY.Z., YouJ.X. and LiH., Risk evaluation in failure mode and effects analysis using fuzzy digraph and matrix approach, Journal of Intelligent Manufacturing27(4) (2016), 805–816.
26.
LiuP. and YouX., Probabilistic linguistic TODIM approach for multiple attribute decision-making, Granular Computing2(4) (2017), 333–342.
27.
LiuS. and ForrestJ., The current developing status on grey system theory, Journal of Grey System19(2) (2007), 111–123.
28.
MassanaJ., PousC., BurgasL., MelendezJ. and ColomerJ., Identifying services for short-term load forecasting using data driven models in a Smart City platform, Sustainable Cities and Society28(2017), 108–117.
29.
MengS., LiuN. and HeY., GIFIHIA operator and its application to the selection of cold chain logistics enterprises, Granular Computing2(3) (2017), 187–197.
30.
OzkanS. and KarabacakB., Collaborative risk method for information security management practices: A case context within Turkey, International Journal of Information Management30(6) (2010), 567–572.
31.
PedryczW. and ChenS.M., Granular Computing and Decision-Making: Interactive and Iterative Approaches, Springer, Heidelberg, Germany, 2015.
32.
PedryczW., EkelP. and ParreirasR., Fuzzy multicriteria decision-making: Models, methods and applications, Wiley, 2011.
33.
PinarA.J., AndersonD.T., HavensT.C., ZareA. and AdeyebaT., Measures of the Shapley index for learning lower complexity fuzzy integrals, Granular Computing2(4) (2017), 303–319.
34.
QinJ., Interval type-2 fuzzy Hamy mean operators and their application in multiple criteria decision making, Granular Computing2(4) (2017), 249–269.
35.
SanchezM.A., CastroJ.R., CastilloO. and MendozaO., Fuzzy higher type information granules from an uncertainty measurement, Granular Computing2(2) (2017), 95–103.
36.
SilvaM.M., de GusmaoA.P.H.,
PoletoT.,
SilvaL.C.E. and CostaA.P.C.S., A multidimensional approach to information security risk management using FMEA and fuzzy theory, International Journal of Information Management34(6) (2014), 733–740.
37.
SunL.L., SrivastavaR.P. and MockT.J., An information systems security risk assessment model under the Dempster-Shafer theory of belief functions, Journal of Management Information Systems22(4) (2006), 109–142.
38.
TregearJ., Risk Assessment, Information Security Technical Report6(3) (2001), 19–27.
39.
TsaiP.W., PanJ.S., ChenS.M. and LiaoB.Y., Enhanced parallel cat swarm optimization based on the Taguchi method, Expert Systems with Applications39(7) (2012), 6309–6319.
40.
TsaiP.W., PanJ.S., ChenS.M., LiaoB.Y. and HaoS.P., Parallel Cat Swarm Optimization, Proceedings of the 2008 International Conference on Machine Learning and Cybernetics, Kunming, China6 (2008), 3328–3333.
41.
TuysuzF. and KahramanC., Project risk evaluation using a fuzzy analytic hierarchy process: An application to information technology projects, International Journal of Intelligent Systems21(6) (2006), 559–584.
42.
Uribe-PerezN. and PousC., A novel communication system approach for a Smart City based on the human nervous system, Future Generation Computer Systems76(2017), 314–328.
43.
WangC., FuX., MengS. and HeY., Multi-attribute decision-making based on the SPIFGIA operators, Granular Computing2(4) (2017), 321–331.
44.
WangF., LiH., LiuA. and ZhangX., Hybrid customer requirements rating method for customer-oriented product design using QFD, Journal of Systems Engineering and Electronics26(3) (2015), 533–543.
45.
WangY.M., ChinK.S., PoonG.K.K. and YangJ.B., Risk evaluation in failure mode and effects analysis using fuzzy weighted geometric mean, Expert Systems with Applocation36(2) (2009), 1195–1207.
46.
XuZ. and GouX., An overview of interval-valued intuitionistic fuzzy information aggregations and applications, Granular Computing2(1) (2017), 13–39.
47.
XuZ. and WangH., Managing multi-granularity linguistic information in qualitative group decision making: An overview, Granular Computing1(1) (2016), 21–35.
48.
ZadehL.A., Fuzzy sets, Information and control8(1965), 338–353.
49.
ZhangS.F., LiuS.Y. and ZhaiR.H., An extended GRA method for MCDM with interval-valued triangular fuzzy assessments and unknown weights, Computers and Industrial Engineering61(4) (2011), 1336–1341.
50.
ZhouQ.J. and ThaiV.V., Fuzzy and grey theories in failure mode and effect analysis for tanker equipment failure prediction, Safety Science83(2016), 74–79.
