Risk Assessment for Information Security Based on Fuzzy Membership Matrix

According to assets, threats and vulnerabilities and other factors in risk assessment model, this paper proposed an information security and risk calculation method on the basis of fuzzy membership matrix, besides, this work also designed an information security risk assessment system to implement the above method, which achieves risk assessment from three aspects-asset identification, risk calculation and risk results processing. The system improves objectivity and practicality of information security risk assessment. Also, it can generate a risk assessment report, which can be regarded as an indicator in evaluating the safety and security construction status of a company.