Construction of information security evaluation index system

As we all known, information security has become an important affecting factor about the development of information technology. Toefficiently ensure the information security, it is necessary to take regular evaluation for the security situation of information system. However, the basis work of evaluation index system is less scientific and measurable. According to the essential demand of information system security level protection (ISSLP) and the present information security status of the company system, in this paper, firstly, the evaluation index system of ISSLP is systematically constructed andindividual evaluation indexes are objectivelyclarified. Then, by analytic hierarchy process and subjective estimate method, the weight of these indexes is determined. Finally, the calculation method, which is able to reflect information security situation and the weakest security link of system, is expounded to quantify individual evaluation and comprehensive evaluation. What is more, the experimental result on real data shows that our method is performance more nice, which can provide a new thought in the aspect of information security evaluation work.