关键词: 信息安全风险评估, 资产的机密性, 资产的完整性, 资产的可用性, 分析

Abstract: In the process of information security risk assessment, the value of assets is decided by the three security attributes: asset confidentiality, integrity and availability. So we must consider these three factors when we assign the value to assets. The value of the assets is a function of the three factors, and the specific function relation can be made decisions by the assessor. This paper discusses the impact of two kinds of commonly used function relationship of information security assets value.

Key words: information security risk assessment, asset confidentiality, asset integrity, asset availability, analysis