Information systems security risk assessment on improved fuzzy AHP

An improved fuzzy AHP method based on triangular fuzzy number is presented to deal with the problem of the risk assessment for information systems security. The calculation model for the information systems risk assessment is established. The judgments of the experts are depicted with triangular fuzzy number complementary judgment matrix, and the weights of the indices are obtained by the least variance priority method for triangular fuzzy number complementary judgment matrix. Then the security rank of the systems is determined by the fuzzy comprehensive evaluation. An example dedicates that the method is feasible and effective, and provides reasonable data for constituting the risk control strategy of the information systems security.