信息安全风险的多层次模糊灰色综合评估

In order to protect information from threat and timely evaluate the information system, the paper is based on the principle of information security risk assessment, the method of multi-level fuzzy-gray comprehensive evaluation is applied in information security risk evaluation, solve the difficulties of risk assessment in quantitative evaluation of qualitative indicators, and use the ambiguity and gray of experts’ judgment information, to make evaluation more accuracy. Finally, an example proves that the method can be effectively applied to information security risk assessment.