Evaluation method and evaluation device for platform security risk

Abstract

The invention provides an evaluation method and evaluation device for platform security risk, and the method comprises the steps: constructing a practical application scene of a platform, carrying out vulnerability assessment, threat assessment and asset assessment in combination with a production technology process, and carrying out comprehensive obtaining of a risk assessment result of the platform. In the prior art, when a threat value and a vulnerability value of a device are calculated, a specific production technology process is not combined to carry out security risk assessment, and a general vulnerability scoring system with known vulnerabilities is mostly directly utilized to carry out security risk calculation in the assessment process; the problem of difference of influence of vulnerability utilization on system integrity and availability in an industrial scene is not considered, the error is relatively small when the platform security risk is evaluated, and the accuracy of security risk evaluation of the collaborative manufacturing platform is improved.

Description

technical field [0001] The present application relates to the technical field of industrial control, in particular to a platform security risk assessment method and assessment device. Background technique [0002] Under the background of the deep integration of industrialization and informatization, network collaborative manufacturing has developed rapidly as a new production mode, which has improved the level of digitization, networking and intelligence in the manufacturing industry. However, the integration of the Internet and the manufacturing industry also makes the collaborative manufacturing platform face more serious network security threats. Once the equipment vulnerabilities in the collaborative manufacturing platform are exploited by attackers, it will cause economic and goodwill damage to industrial enterprises. Therefore, the assessment of the security risk of the network collaborative manufacturing platform is an important link to ensure the security of informat...

AI Technical Summary

Problems solved by technology

[0003] In the existing technology, when calculating the threat value and vulnerability value of the equipment, the safety risk assessment is not combined with the specific production process, and the assessment Most of the process directly uses the general vulnerability scoring system of known vulnerabilities to calculate the security risk, without considering the differences in the impact of vulnerability exploitation on system integrity and availability in industrial scenarios. In this way, the platform security risk is evaluated The time error is large, which reduces the accuracy of the security risk assessment of the collaborative manufacturing platform

Images