Network security assessment method and system

Abstract

The present invention discloses a network security assessment method. The method includes the steps: obtaining network security risk factors, wherein the risk factors include an asset factor, a vulnerability factor, and a threat factor; establishing a network security assessment model according to the risk factors via a first preset rule; utilizing the network security assessment model to obtain evaluation values of the risk factors; obtaining credibility degrees of the risk factors according to a second preset rule; obtaining a network security evaluation value according to the evaluation values of the risk factors and the credibility degrees of the risk factors, wherein the network security assessment values are obtained by multiplying the evaluation values of the risk factors by the reliability degrees of the risk factors. The invention also provides a network security assessment system implementing the above method. The method and system solve the technical problem that the security defense technology in the related art has poor network security because the action is taken after an event and a possible network attack event cannot be predicted.

Description

technical field [0001] This application relates to the field of Internet security assessment, in particular, to a network security assessment method and system. Background technique [0002] With the rapid development of computer network technology and the extensive application of large-scale, distributed high-speed networks, the Internet has penetrated into all aspects of people's study, work and life, and has become an important means of information exchange and resource sharing among people. While the scale of the Internet is developing rapidly, network security incidents related to it occur frequently, and network security issues are becoming increasingly prominent. The current security situation facing the Internet is mainly manifested in the following aspects: hidden attacks such as websites being implanted with backdoors are on the rise, and user information on websites has become the focus of hackers stealing; phishing is becoming more and more rampant, seriously aff...

AI Technical Summary

Problems solved by technology

The main reason is: on the one hand, these defense measures are passive security protection measures, and they take corresponding actions when or after an attack event occurs; on the other hand, most defense measures in related technologies adopt rule-matching method to detect attacks, it is not suitable for detecting unknown attacks, and it is also impossible to predict possible attack events

Images