Study And Design Of The Risk Assessment System Based On Analytic Hierarchy Process

With the rapid development of the world's information technology, the number of a variety of high-tech computer crimes and network attacks is increasing. With the increasing demands of the information security, network and information security has become an urgent problem to be settled. Considering the information security from the point of system engineering, the risk assessment is the basis and prerequisite for the information security system.In this paper, based on the actual needs of risk assessment of information security, the criterion CC&GB18336 of risk assessment are studied, and the information security risk assessment system based on AHP(Analytic Hierarchy Process) is presented. A regulating method for the inconsistent judgment matrix in AHP is presented to ensure the implementation of risk assessment method, and the the feasibility of the regulating method is validated by case analysis. Through the risk assessment of information security, the risk existed in the system can be obtained to make sure the security level of the system. By giving the advice for selecting the information security protecting measures to counter the risk, the risk can be decreased to an acceptable extent. Finally, the method presented in this paper is validated by case analysis, the results of which show that the method accords with the actual evaluation results.