Abstract:

In order to determine the weights of risk factors reasonably in information security risk assessment and scientifically evaluate information security risk, the weights of risk factors are  calculated by a comprehensive weight method based on the game theory. Finally, an instance of risk assessment is given to show the rationality and feasibility of the results by analyzing an information system. It provides a new method for information system risk assessment.

Key words: entropy；G1 method；game theory；comprehensive weight；information security risk assessment