关键词: 信息安全风险评估, 主客观综合赋权, 妥协率法

Abstract: With respect to the ranking of information security risk assessment value that information security risk assessment weights and decision makers’ weights are both unknown, an information security risk assessment method based on the compromise rate method is proposed. It puts forward a new weight-calculate method based on distance measure to determine the index weight. By decision makers’ evaluation to each other and group consistency, a subjective and objective comprehensive empowerment model is constructed to obtain the decision makers’ weights. It applies compromise rate method for ranking information security risk. Case analysis and comparative analysis show the validity and feasibility of the method.

Key words: information security risk assessment, subjective and objective comprehensive empowerment, compromise rate method