Method and system for automated information security evaluation

Abstract

The invention discloses a method and a system for automated information security evaluation. The method includes the following steps: creating a risky leak library; creating the risk levels of the risky leak library; utilizing an interface call-scanning tool to scan an evaluated system, and acquiring and storing scanning result data; comparing the acquired scanning result data with the leak data in the risky leak library for judgement, and identifying security leaks and risk levels thereof existing in the evaluated system. Since the method and the system for automated information security evaluation provided by the invention adopt the scanning tool to directly carry out interface analysis and read the scanning result data of the scanning tool, the invention can carry out complete, objective and intelligent data analysis on scanning results by means of a security mapping identification mechanism of the evaluation system, thus guaranteeing accuracy, increasing the working efficiency andreducing the manpower cost.

Description

Technical field [0001] The invention relates to the technical field of system automatic assessment, and in particular to a method and device for automatic information security assessment of system risks. Background technique [0002] Risk assessment is a time-consuming, labor-intensive and requires a lot of relevant professional or business knowledge support. Usually, this work is done by professional consultants. These consultants can come from the organization or consulting company being assessed. These consultants with professional qualities play an important role in risk assessment. In order to make risk assessment work widely carried out in all walks of life, risk assessment tools have become indispensable technical support methods. At present, many organizations have developed risk assessment tools based on some safety management guidelines and annotations, which provide convenient conditions for risk assessment. As the process of risk assessment gradually shifts to autom...

AI Technical Summary

Problems solved by technology

[0005] 1. Scanning tools can reduce manual identification of system and network vulnerabilities, but analysts still need to analyze a large amount of scanning result data to analyze and evaluate various vulnerabilities and risks in the information system; Increased the workload of staff like this, can't improve work efficiency;

[0006] 2. It is difficult for analysts to rate the risks of scan results, which also increases the workload of assessment work;

[0007] 3. Due to various reasons, it is difficult for the analysts to ensure a comprehensive, objective and complete analysis of the scanning result data, which is prone to errors

Images