A network security evaluation method, device, equipment and storage medium

Abstract

The embodiment of the present invention discloses a network security evaluation method, device, equipment and storage medium. The method includes: acquiring security event data of at least one internet protocol address within a first preset time; Event data, and the maximum number of occurrences of each security event of at least one Internet Protocol address within the first preset time, determine the security quantitative data of at least one Internet Protocol address under each security event; Event data and industry information, determine the security weight value of at least one Internet Protocol address under each security event; determine the security of at least one Internet Protocol address according to the security quantification data and security weight value of at least one Internet Protocol address under each security event Score, realize the accurate evaluation of network security, and determine the corresponding security weight value according to security events, which can adapt to the changing network security requirements.

Description

technical field [0001] Embodiments of the present invention relate to the field of network technologies, and in particular, to a network security evaluation method, apparatus, device, and storage medium. Background technique [0002] With the rapid development of information technology, the network has become an important support platform for the production, operation and management of enterprises; however, various security incidents (for example, zombies, malicious programs, etc.) Therefore, it is of great significance to quantitatively assess enterprise network security and realize timely early warning of security incidents. [0003] The existing network security assessment methods usually set fixed preset weights for various security events, calculate the health index of various security events, and then obtain the network security index of the enterprise or region by re-weighting; The influence of enterprises in different industries is quite different. In this case, the...

AI Technical Summary

Problems solved by technology

[0003] The existing network security assessment methods usually set fixed preset weights for various security events, calculate the health index of various security events, and then obtain the network security index of the enterprise or region through re-weighting; The influence of enterprises in different industries is quite different. In this case, the existing network security assessment methods cannot achieve accurate assessment of network security, and with the development of time, new security incidents continue to emerge, and the existing network security assessment methods cannot Adapt to changing cybersecurity needs

Images