A security risk assessment method of website based on threat analysis combined with AHP and entropy weight

Abstract

In the field of information security, risk assessment is the core of the risk management and control. This paper proposes a security risk assessment method based on threat analysis combined with AHP and entropy weight. This method has features that are suitable for website such as practical, easy operative and independent. And the AHP and entropy weight make the evaluation results more objective. This paper gives the calculation model of the method and the main procedures of risk assessment. Finally, take a website as an example to verify the rationality and effectiveness of this method.