Abstract :
The threat of information system is complex and variable, and with many uncertain factors. There are some limits in the traditional estimate methods, for people usually describe the threat with qualitative linguistic words. By mapping qualitative linguistic words of the threat estimate factors into a fine-changeable cloud drops and translating the uncertain factor conditions into quantitative values with the uncertain illation based on the cloud model, and then, integrating correlation analysis, a new improved way of threat analysis is proposed. The validity of the method is proofed to be validated through an example analysis in this paper.