The Application Research of Information Security Risk Assessment Model Based on AHP Method

摘要

Information security risk assessment involves four basic elements, including information assets themselves, vulnerabilities of information assets, facing threats of information assets and possible risks of information assets. A key problem of risk assessment is the distribution of the weights among risk factors. Here we put forward the weight of risk factors which is calculated by using Analytic Hierarchy Process (AHP), obtain the weight of risk factors, sort in accordance with weight of risk factors, intuitively grasp the harm degree of various risks, and screen out the weights relatively larger risk factors for risk management. Our approach provides the scientific basis for information security risk management decisions.