Node risk assessment fusing ICT supply chain network topology and product business information

Abstract

The invention relates to node risk assessment fusing ICT supply chain network topology and product business information, and belongs to the technical field of computer and information science. The invention is mainly used for solving the problem that an ICT supply chain network security risk assessment index system and an assessment method are incomplete. To solve the problem, the invention provides an ICT supply chain network node security risk assessment model which comprehensively considers ICT supply chain network topology information, supplier node product information and supplier node business information. The method comprises the following steps: firstly, quantizing 11-dimensional indexes; then, training the quantitative indexes through an ensemble learning stacking model; and finally, testing an output node security risk level and an F1 value by using the trained three-classification ensemble learning staging model. Experiments are carried out on an ICT bidding and tendering project data set, and a supplier node security risk rating task reaches a higher F1 value, which indicates that the supply chain network node security risk comprehensive evaluation method can well realize comprehensive evaluation of the supply chain network node security risk.

Description

technical field [0001] The invention relates to a node risk assessment that integrates ICT supply chain network topology and product business information, and belongs to the field of computer and information science and technology. Background technique [0002] With the maturity of information and communication technology, ICT products, systems, and services are gradually becoming key elements that affect the normal operation of governments and key industries. The United States, Russia, the European Union and other countries and regions generally recognize the importance of strengthening ICT supply chain security management, and gradually include ICT supply chain security in their national strategies. Due to the late start of the entire ICT industry in my country, research on ICT supply chain security issues is crucial to the implementation of my country's cyberspace security strategy. [0003] On the one hand, the role of supplier node risk assessment is to conduct correla...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to propose an ICT supply chain that comprehensively considers the ICT supply chain network topology information, supplier node product information, and supplier node business information in view of the current ICT supply chain network security risk assessment model index system and incomplete assessment methods. Network node security risk assessment model

Images