Method and device for conducting security identification on information system

Abstract

The embodiment of the invention discloses a method and a device for conducting security identification on an information system. The method includes the following steps: determining a target information system; according to the result of security threat modeling of the target information system, acquiring the security attribute value of each property in the target information system and the quantization value of the corresponding threat category; according to the quantization value of the threat category, calculating the security information value of each property in the target information system; according to the security information value of each property and the weight value of each property in the target information system, obtaining the security information value of the target information system; and according to the security information value of the target information system, searching for a preset security level list and obtaining the corresponding security level of the target information system. By quantizing the property, threat and leak in the information system and comprehensively considering the security risk in the information system, the embodiment meets the requirement of the information system on security identification.

Description

technical field [0001] The invention relates to the technical field of security information, in particular to a method and device for security identification of an information system. Background technique [0002] Information system security identification refers to the process of identifying security attributes such as confidentiality, integrity and availability of information systems and information processed, transmitted and stored according to relevant information security technology and management standards. The most important step in the process of security identification is how to identify threats and quantify the possibility of threat occurrence. In the prior art, when threat identification is performed, it mainly relies on the security evaluation personnel of the information system to make judgments based on technical experience, scan the information system for vulnerabilities and obtain the vulnerability information of the information system, and determine the thre...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the embodiments of the present invention is to provide a method and device for security identification of information systems to solve the problem that the existing threat identification based on vulnerability scanning is difficult to meet the security identification requirements of information systems

Images