Information security risk assessment method based on fault tree and system thereof

Abstract

The invention discloses an information security risk assessment method based on a fault tree and a system of the information security risk assessment method. According to the information security risk assessment method, a fault tree analysis method is adopted to achieve system risk calculation for a network device, non-intersecting minimum cutest is adopted to carry out risk qualitative analysis and top event probability analysis, location of the weakest link of the system is conducted quickly and occurrence probability of the weakest link of the system is calculated, through the method, system safety grading is carried out, and corresponding rectification measures are put forward. Due to the fact that the information security risk assessment method is adopted, the information security risk assessment method based on the fault tree and the system of the information security risk assessment method are suitable for safety assessment of an application system constructed on a network security hardware device in a frame mode.

Description

technical field [0001] The invention relates to an information security assessment method and system, in particular to a fault tree-based information security risk assessment method and system in network equipment. Background technique [0002] There are many kinds of information security assessment methods. With the different application systems, the assessment objects are also changing. In the assessment, the network and security hardware equipment of the architecture are often ignored. With the change of the application system assessment factors, the assessment method is not properly adopted. , will affect the evaluation progress and the accuracy of fault location. Contents of the invention [0003] Purpose of the invention: In order to solve the problems in the prior art, the present invention provides an information security risk assessment system for evaluating network equipment based on a fault tree. [0004] Technical solution: In order to achieve the above purpos...

AI Technical Summary

Problems solved by technology

[0002] There are many kinds of information security assessment methods. With the different application systems, the assessment objects are also changing. In the assessment, the network and security hardware equipment of the architecture are often ignored. With the change of the application system assessment factors, the assessment method is not properly adopted. , will affect the progress of evaluation and the accuracy of fault location

Images