Network equipment risk assessment method

Abstract

The invention relates to a network equipment risk assessment method, and the method comprises the steps: enabling risk controllability to serve as a third dimension attribute of assessment on the basis of a two-dimensional risk matrix, wherein the risk controllability is used for describing the risk control difficulty; enabling the risk importance to be used for completely describing the risk size, wherein the function relation between the risk importance and the probability, loss and controllability is expressed by a risk function; expressing the risk importance degrees of three attributes through indexes in a risk function expression; and extending the input of the risk matrix to an infinite series from a finite series. The method irons out the defects of a two-dimensional risk matrix during risk assessment, increases the attribute dimensions of risks from a risk control angle, and enables the assessment to be more reasonable. The series of an input variable approaches to infinite, thereby enabling an input value to be precise. The method determines a specific risk assessment function, and obtains a unique risk ordering result according to the risk importance, effectively guides the risk control practice, and is higher in universality.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a network equipment risk assessment method. Background technique [0002] The normal operation of network equipment is an important cornerstone of network security. Risk assessment of network equipment is crucial to prevent network security issues from happening. Classical risk assessment theory believes that risk is the combination of the probability of adverse events and the consequences of adverse events. As a relatively simple risk assessment method, the two-dimensional risk matrix is ​​widely used in the risk assessment of network equipment, but the singleness of the description angle and the ambiguity of the description method also make the assessment results of the two-dimensional risk matrix unable to effectively guide the risk. control practice. [0003] Two-dimensional risk matrix, such as figure 1 As shown, it is widely used in risk assessment in engineeri...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies in the prior art, the present invention provides a network equipment risk assessment method to solve the defects of the two-dimensional risk matrix in risk assessment, including increasing the risk attribute dimension from the perspective of risk control to make the assessment more reasonable; The series of input variables tends to be infinite, so that the input value is accurate; determine the specific risk assessment function, and obtain the unique risk ranking result according to the risk importance, so as to effectively guide the practice of risk control and effectively prevent the occurrence of network security problems

Images