改进的FAHP信息安全风险评估方法

结合当前信息安全风险评估的特点和发展现状，将模糊数学的相关优选理论、模糊一致矩阵、变权法、二次评判有机结合，提出了一种基于FAHP的信息安全风险评估模型的改进方案。首先，模糊一致矩阵的引入，保证了判断矩阵的一致性。其次，将变权法引入到权重向量的计算过程中，促使综合指标增大，使评估因素的权重能更好地体现相应因素在决策中的作用。最后，通过引入二次评判，提高了风险评估的准确性。通过实例分析，证明了该方法可以有效的应用到信息系统安全风险评估中去，实验结果符合实际。

Improved FAHP information security risk assessment methods

According to the present feature and development of information security risk assessment, this paper combine the optimization theory of fuzzy mathematics, fuzzy consistent matrix, variable weight method and the second evaluation and propose an improved program of information security risk assessment model based on FAHP. First, the introduction of fuzzy consistent matrix ensure the consistency of judgment matrix. Second, introduce the variable weight method into the weight vector calculation process, which increase the weight of high risk factors, so that the weight of evaluation factors can reflect the effect of corresponding factor in the decision-making role. Finally, the introduction of the second evaluation can improve the accuracy of risk assessment. The study of the case shows that the method can be effectively applied to the risk assessment of the information system security, and the results are in accord with reality.