基于CORAS框架的信息安全风险评估方法

Risk assessment method for information security based on CORAS framework

介绍了信息安全风险评估的现状、相关准则以及基于CORAS框架的信息安全风险评估方法,并利用层次分析法对可能存在的风险进行量化,最后利用网上电子银行系统的实例,证明了该方法可以很好地适用于信息安全风险评估。

Information security risk assessment of the status and the correlation criterion were reviewed,then a new information security risk assessment method was put forward based on the CORAS frame,and the risk which possibly existed was quantified.Finally,example of on-line electronic bank system was introduced to improve that the method can be applied to information security risk assessment.