Automatic evaluation method and device based on grade protection 2.0

Abstract

The invention discloses an automatic evaluation method and device based on grade protection 2.0. The method comprises the steps of receiving project parameter information input by a user, wherein theproject parameter information comprises type information of tested equipment and login information of the tested equipment; reading evaluation items corresponding to the tested equipment under the security level of a tested system and evaluation methods corresponding to the evaluation items from an evaluation method library according to the type information of the tested equipment; and performingcommunication connection with the tested equipment through the login information of the tested equipment, respectively executing the evaluation method corresponding to each evaluation items, and taking back the obtained evaluation result of each evaluation item to the local. According to the automatic evaluation method based on the grade protection 2.0, the grade protection evaluation process canbe processed in a process mode, manual intervention is avoided, and the purpose of full-automatic detection is achieved. Meanwhile, the probability that the evaluation software gets stuck is reduced.

Description

technical field [0001] The invention relates to the technical field of graded protection evaluation, in particular to an automatic evaluation method and device based on graded protection 2.0. Background technique [0002] In recent years, with the rapid development of information technology and network technology, people's lives have been more and more affected. From government agencies to enterprises and educational institutions, more and more information systems are used to process business. While enjoying the convenience brought by the information system, it is also threatened by the security problem of the information system. To this end, my country has formulated a series of policy standards related to information security based on its national conditions, and clarified the implementation of security level protection 2.0 standards for information systems, and level evaluation is an extremely important part of level protection work. Under the guidance of relevant natio...

AI Technical Summary

Problems solved by technology

For example: manual evaluation is highly involved, evaluation tools are only used as auxiliary tools, and the level of evaluation personnel varies greatly, resulting in large differences in evaluation results; the use of evaluation tools is complicated, and the probability of error is high; evaluation tools are not compatible with the latest level of protection 2.0 standards Perfect match; the evaluation tool often has abnormal situations such as forced exit and freeze

Images