Bayesian Decision Based Method for Assets Recognition of Risk Assessment

Risk Assessment is one of the important methods to protect the security of information system. It will assess the value and vulnerability of the assets, the possibility of security incidents caused by threat, then determining the impact of security events to the system. As an important part of risk assessment, asset recognition is directly related to the accuracy of the risk assessment and the cost of the protective measures. Aiming at the shortcomings of the assignment of assets importance, a new method is presented to identified asset, considering all factors of assets and taking into count the loss of value caused by the misclassification based on Bayesian decision theory at the same time.