关键词: 信息系统, 风险评估, 安全指标体系, STAMP, STPA, 改进AHP算法

Abstract: The existing security risk assessment methods and models do not fully consider the impact of the risk assessment behavior itself on the assessment results, which is a big lack of understanding that the behavior of risk assessment may introduce security risk. In response to this problem, this paper first establishes a complete STAMP model of risk assessment behavior. On this basis, the STPA analysis method is used to conduct security analysis on risk assessment behavior, the STAMP theory is used to construct a risk assessment behavior security index system, and the improved AHP method is used to screen important index factors in the security index system. The proposed security index system focuses on the emergence of the system as a whole rather than the reliability of individual components. According to the reasons for the occurrence or danger of system safety accidents, it provides a more effective way of constructing a safety index system.

Key words: information system, risk assessment, security index, system-theoretic accident model and process(STAMP), system theoretic process analysis(STPA), improved AHP algorithm