Multi-Level Fuzzy-Gray Comprehensive Evaluation of Information Security Risk

Information security is very important to a system. For strengthening the security of a system, we should control the risk in a low level which may need proper evaluation method. In this paper, an integrative method of multi-level fuzzy-gray evaluation was proposed to solve the problem that it is difficult to evaluate the information security risk with quantitative assessment. At last, an example is given to show that this method can be applied to information security risk assessment effectively.