Abstract: There are many risk assessment methods for information system, and in this paper the quantitative risk assessment method based on threat analysis is presented. The assessment processes, two kinds of quantitative practices, the absolute one and the relative one, and the analysis of the advantages and drawbacks for the two practices, also the example demonstrations are provided.

摘要： 对信息系统风险评估的方法有多种,该文提出了基于威胁分析的量化风险评估方法。包括其评估的步骤、量化的不同实现方式——绝对量化方式和相对量化方式、两种量化方式的优缺点分析以及两种量化方式评估的举例说明。

关键词: 信息系统, 风险评估, 绝对量化, 相对量化

CLC Number: 

• TP311.52