A method and system for evaluating individual information security capabilities based on PC terminal behavior

Abstract

The invention provides an individual information safety capacity evaluation method and system based on a PC terminal behavior. The individual information safety capacity is determined by objectively assessing the individual computer behavior data, the problems that the existing evaluation method is single, and the evaluation comprehensiveness is insufficient are solved, the individual subject consciousness is considered, and the importance on the body analysis by more important objective behavior is taken into special consideration, thereby reflecting the information safety capacity of the user more real.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of information security capability evaluation, and in particular to a method and system for evaluating individual information security capability based on PC terminal behavior. Background technique [0002] With the increasing frequency of network security incidents and the widespread use of social engineering in network attacks, the importance of individual information security capabilities has gradually increased. Individual information security capabilities are weak, and problems with PC terminals, such as unreasonable password settings, firewall opening, and improper port opening settings, have brought great information security risks to individuals and enterprises. In 2003, Donner proposed the security ontology and defined it as "an ontology that describes security-related concepts and the interrelationships between these concepts in information systems". With the rise of the ...

AI Technical Summary

Problems solved by technology

However, the problem with this type of method is that even if individuals have high information security literacy in the test, it is difficult to guarantee whether they can implement these security awareness into specific behaviors in their actual activities. Under sensitive conditions such as questionnaires, users will consciously prepare and respond according to the test questions, which is difficult to reflect the real implementation of user safety awareness

However, the disadvantage of this type of method is that it only trains for a certain skill, which cannot adapt well to the current emerging security risks, and the development cost is high

[0010] To sum up, the current research on individual information security capability evaluation of PC terminal behavior is still highly subjective, the formal description of user behavior security analysis is lacking, the content of questionnaires or tests is fixed, and it is difficult to detect complex and changeable user responses in different scenarios. issues such as the ability of the security threat

Images