Method and system for automated information security evaluation

Abstract

The invention discloses a method and a system for automated information security evaluation. The method includes the following steps: creating a risky leak library; creating the risk levels of the risky leak library; utilizing an interface call-scanning tool to scan an evaluated system, and acquiring and storing scanning result data; comparing the acquired scanning result data with the leak data in the risky leak library for judgement, and identifying security leaks and risk levels thereof existing in the evaluated system. Since the method and the system for automated information security evaluation provided by the invention adopt the scanning tool to directly carry out interface analysis and read the scanning result data of the scanning tool, the invention can carry out complete, objective and intelligent data analysis on scanning results by means of a security mapping identification mechanism of the evaluation system, thus guaranteeing accuracy, increasing the working efficiency andreducing the manpower cost.

Description

technical field [0001] The invention relates to the technical field of system automatic assessment, in particular to a method and device for automatic information security assessment of system risks. Background technique [0002] Risk assessment is a time-consuming, labor-intensive task that requires a lot of relevant professional or business knowledge support. Usually, this work is done by professional consultants. These consultants can come from the assessed organization or consulting firm. These professional consultants play an important role in risk assessment. In order to enable risk assessment work to be widely carried out in various industries, risk assessment tools have become an indispensable means of technical support. At present, many organizations have developed risk assessment tools based on some safety management guidelines and annotations, which provide convenience for risk assessment. As the risk assessment process gradually turns to automation and standard...

AI Technical Summary

Problems solved by technology

[0005] 1. Scanning tools can reduce manual identification of system and network vulnerabilities, but analysts still need to analyze a large amount of scanning result data to analyze and evaluate various vulnerabilities and risks in the information system; Increased the workload of staff like this, can't improve work efficiency;

[0006] 2. It is difficult for analysts to rate the risks of scan results, which also increases the workload of assessment work;

[0007] 3. Due to various reasons, it is difficult for the analysts to ensure a comprehensive, objective and complete analysis of the scanning result data, which is prone to errors

Images