Method and device for security configuration optimization

Abstract

The invention discloses a method and a device for security configuration optimization, which are used for solving the problems that the usability of a configured system is low in the prior art. The method comprises the steps of determining configuration item assemblies with the sum of the security weights corresponding to contained configuration items larger than a set security threshold according to the security weights corresponding to the configuration items contained in the system, selecting a configuration item assembly with the minimum sum of usability loss weights corresponding to the contained configuration terms in the determined configuration item assemblies according to the usability loss weights corresponding to the configuration terms, and configuring the system according to the contained configuration terms in the selected configuration item assembly. According to the method, the selected configuration item assembly not only meets the security requirement of the system, but also least affects the usability of the system, so that as being configured according to the selected configuration item assembly, the configured system meets the security requirement and simultaneously improves the usability.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method and device for optimizing security configuration. Background technique [0002] As network security issues become increasingly prominent, each enterprise establishes its own security configuration specification according to business needs and network environment, and performs system configuration on the operating system, database, application software, and network equipment according to the security configuration specification. During the system configuration process, , usually only consider the requirements of security, ignoring the convenience of use. On the other hand, it is also difficult to find a combination of configuration items that not only satisfies security but also improves usability from numerous configuration items. [0003] Illustrate with a simple example. Assuming that the network cable interface, universal serial bus (Universal Serial Bus, USB) interf...

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide a security configuration optimization method and device to solve the problem in the prior art that although the configured system can meet the security requirements, the usability is low

Images