Network vulnerability evaluation method

Abstract

The invention discloses a network vulnerability evaluation method. The method comprises the following steps of: determining vulnerability cost factors according to vulnerability cost information; obtaining a vulnerability evaluation result according to the evaluation cost factors; determining vulnerability consequence factors according to vulnerability consequence information; obtaining a vulnerability consequence evaluation result according to the vulnerability consequence factors; and determining network vulnerability according to the vulnerability cost evaluation result and the vulnerability consequence evaluation result. Therefore, the method of the invention takes the vulnerability cost factors and the vulnerability consequence factors into consideration comprehensively when evaluates the network vulnerability, and enriches and perfects the basis for network vulnerability evaluation in a targeted way, so that the accurate performance of the network vulnerability evaluation is improved obviously. Moreover, the obtained improved network vulnerability evaluation accuracy can provide important reference for network safety management, ensures that corresponding safety measures canbe implemented more targeted in a planned manner based on the reference, and avoids a serious result caused by utilizing the network vulnerability.

Description

technical field [0001] The invention relates to network security analysis technology, in particular to a network vulnerability assessment method. Background technique [0002] In computer network, research on vulnerability can be divided into several problem areas, including: definition of vulnerability, discovery of vulnerability, identification of vulnerability, analysis and evaluation of vulnerability. Vulnerability assessment is a qualitative and quantitative analysis of the vulnerability of the target system to be assessed. The system mentioned here can be a service, a computer on a network, or the entire computer network. In the field of network security, vulnerability assessment and intrusion detection system, firewall, and virus detection constitute the four elements of network security. The three technologies other than vulnerability assessment are passive detection during or after the attack, while vulnerability assessment is It is an active detection before the a...

AI Technical Summary

Problems solved by technology

The common point of these standards is that a value is generally used to represent the level of vulnerability, which makes it more difficult to ensure the accuracy of vulnerability assessment

Images