Methodology of Quantitative Risk Assessment for Information System Security

摘要

This paper proposes a security assessment method of information system based on mixed methods of constructing weights of criteria, which indicate how to evaluate the overall security of information system in a synthetic and quantitative way from the aspect of confidentiality, integrity, availability and controllability of the information system security.