To solve the following problems of information security risk assessment method: inconsistency of judgmentmatrix, and irrationality of expert weight, risk assessment method based on the consistent matrix and information entropy(RAMCI) is proposed, which uses the priority relationship matrix to establish consistent judgment matrix and informationentropy to calculate the weight of multiple experts with an indicator score. This method was used in a case to assess therisk. The results show that: in comparison with previous assessment methods, RAMCI has the following advantages: consistencyof judgment matrix not concerned; objectively reflects the statistical profile of individual risk factors. So RAMCIis a practical information system risk assessment method.
展开▼
