Static and dynamic analysis technology-based host system security evaluation method

Abstract

The invention discloses a static and dynamic analysis technology-based host system security evaluation method, which analyzes and evaluates whether a host system has a security risk. The system comprises a static data acquisition unit, a dynamic data acquisition unit and a remote analysis server. The method for performing security elevation on the host system comprises the following processes of:uploading the static data acquisition unit; acquiring static security data such as a profile parameter, service list, process information and the like of the host system; performing comprehensive correlation analysis by using a remote analyzer; performing dynamic analysis on service response, vulnerability matching, deep logic security and the like of the host system according to a static security data analysis result; and determining whether the host system has the security risk by a static and dynamic analysis technology combined method.

Description

technical field [0001] The invention relates to a security assessment method in the technical field of information security, in particular to a host system security assessment method based on static and dynamic analysis techniques. Background technique [0002] As one of the important basic industries of the country, the electric power industry, with the deepening of electric power informatization, information security issues have seriously threatened the safe and stable operation of the power grid. In order to prevent malicious attacks on power information systems and networks and power system accidents caused by them, the National Power Secondary System Safety Protection Expert Group and Working Group proposed the "National Power Secondary System Safety Protection Overall Plan", the National Electric Power Regulatory Commission The committee passed the "Regulations on the Safety Protection of the Secondary Power System" (Decree No. 5 of the Electric Power Regulatory Commis...

AI Technical Summary

Problems solved by technology

[0004] Existing host security assessment mainly relies on manual analysis and vulnerability scanning, which is time-consuming and labor-intensive. It focuses on routine security testing such as account security and patch vulnerabilities, and it is difficult to find deep-seated logical security risks.

Images