Safety risk evaluation method and device, computer equipment and storage medium

Abstract

The application relates to a safety risk evaluation method and device, computer equipment and a storage medium. The method comprises the steps of: acquiring a target risk evaluation parameter set corresponding to a to-be-evaluated object, wherein the target risk evaluation parameter set comprises at least two target risk evaluation parameters; acquiring risk influence degrees corresponding to current target risk evaluation parameters; calculating parameter difference values of the current target risk evaluation parameters relative to corresponding historical risk evaluation parameters; according to the risk influence degree of each target risk evaluation parameter and the corresponding parameter difference value, obtaining a first weight corresponding to each target risk evaluation parameter, wherein the risk influence degree and the first weight are in positive correlation relationship, and the parameter difference value and the first weight are in positive correlation relationship; and according to a risk score corresponding to each target risk evaluation parameter and the corresponding first weight, obtaining a target risk evaluation value corresponding to the to-be-evaluated object. By adopting the method, safety risk evaluation accuracy can be improved.

Description

technical field [0001] The present application relates to the security field, in particular to a security risk assessment method, device, computer equipment and storage medium. Background technique [0002] With the rapid development of computer technology and the continuous growth of the number of Internet users, there are more and more computer systems such as cloud platforms, and more and more security problems are faced. At present, when evaluating the security risks of computer systems such as cloud platforms, Determine the risk of the object to be assessed by calculating the number of existing threats and the risk level, such as determining the risk of the computer system based on the number of vulnerabilities and the level of vulnerabilities. However, the detected threats are not complete, and the accuracy of security risk assessment is low. . Contents of the invention [0003] Based on this, it is necessary to provide a security risk assessment method, device, com...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of computer technology and the continuous growth of the number of Internet users, there are more and more computer systems such as cloud platforms, and more and more security problems are faced. At present, when evaluating the security risks of computer systems such as cloud platforms, Determine the risk of the object to be assessed by calculating the number of existing threats and the risk level, such as determining the risk of the computer system based on the number of vulnerabilities and the level of vulnerabilities. However, the detected threats are not complete, and the accuracy of security risk assessment is low.

Images