信息安全风险评估的综合评估方法综述

Information security risk assessment survey

信息安全风险评估是信息系统安全的前提和基础。该文对风险评估方法进行了概括描述,在分析以层次分析法为代表的综合评估方法不足的基础上,对4种改进型的综合评估方法进行了归纳,得出了4种有代表性的改进方法,并对这4种方法的优点进行了比较分析。

Information security risk assessments are the prerequisite and basis of effective information system security.This article gives a general description of risk assessment methods and four improved assessment methods based on an analysis of the analytic hierarchy processes.This paper compares these methods to show the advantages and disadvantages of these methods.