Network security automatic assessment method and system adopting same used in classified security protection assessment

Abstract

The invention discloses a network security automatic assessment method used in classified security protection assessment. The method comprises the following steps: first, establishing an assessment script library capable of checking network equipment in various types; second, establishing an assessment index reference value list library; third, selecting the corresponding assessment script from the assessment script library and logging in tested network equipment to execute the assessment script, and obtaining data returned after the script is executed; fourth, analyzing the data returned after the script is executed to obtain an assessment result value, and obtaining an assessment result through comparing the assessment result value with corresponding assessment reference value in the assessment index reference value list library; and fifth, storing the assessment result and outputting the assessment report of the tested network equipment according to the assessment result. The invention further discloses a network security automatic assessment system used in classified security protection assessment, and realizes automatic assessment to network security to get classified security protection assessment results.

Description

technical field [0001] The present invention relates to information system security level protection evaluation (referred to as equal protection evaluation) technology, more specifically, relates to network security automatic evaluation method used in equal protection evaluation, the present invention also relates to the use of this method in equal protection evaluation automatic assessment system for network security. Background technique [0002] Information security involves national interests, security and sovereignty. In 2007, the Ministry of Public Security of the People's Republic of China, the State Secrets Bureau, the State Cryptography Administration, and the State Council Informatization Office jointly issued the "Notice on Carrying out the Classification of National Important Information System Security Level Protection", requiring all industries, provinces and cities to Organized and carried out the grading work for the security level protection of important in...

AI Technical Summary

Problems solved by technology

[0004] 1) The inspection method is too simple, resulting in incomplete evaluation results;

[0005] 2) It takes too long and the evaluation efficiency is low;

[0006] 3) Man-made evaluation errors are likely to bring the risk of evaluation errors;

[0007] 4) When checking and evaluating the security configuration checkpoints of different types of network equipment, it is not standardized enough due to human factors

Images