Mobile intelligent terminal system safety evaluation system model and method based on test

Abstract

The invention discloses a mobile intelligent terminal system safety evaluation system model and method based on a test. The mobile intelligent terminal system safety evaluation system model comprises a safety evaluation layer and a safety test layer, wherein the safety evaluation layer is the upper layer and is divided into a risk layer, a threat layer and a vulnerability layer from top to bottom, and the safety test layer is the lower layer and divided into a safety function layer, a test layer and a safety standard layer from top to bottom. The safety evaluation method comprises the following steps of testing the safety test layer, conducting evaluation by the safety evaluation layer according to a test result, calculating the parameter relative weight, conducting a consistency verification on a matrix, calculating a score vector of a safety evaluation result of each layer, and obtaining an evaluation result table through evaluation results of all layers. According to the mobile intelligent terminal system safety evaluation system model and method based on the test, characteristics of a mobile intelligent terminal itself are considered, a method combining the AHP algorithm and a safety test method is utilized, and therefore multilevel evaluation, combining an objective test, subjective assessment, qualitative judgment and quantification calculation, of the mobile intelligent terminal system is achieved. Therefore, an evaluation result is strong in persuasion.

Description

technical field [0001] The invention relates to the field of mobile information security evaluation, in particular to a test-based mobile intelligent terminal system security evaluation system model and evaluation method. Background technique [0002] With the rapid development of mobile communication technology and mobile Internet, mobile smart terminals have been widely used in personal daily life and various government, enterprise, bank and military information systems. Different from traditional mobile phones, mobile smart terminals store more personal privacy, account information, work files, business secrets and even important information. These privacy are often related to the property and reputation security of terminal users or units. At present, the main attack method on the terminal is to use the vulnerability and loopholes of the security mechanism of the intelligent terminal operating system to create a large number of malicious software, viruses and remote con...

AI Technical Summary

Problems solved by technology

[0004] Scientific security assessment must be based on security testing based on security standards. Due to the relative shortage of hardware and software resources for mobile smart terminal operating systems, it is not suitable for traditional computer system security assessment methods. Therefore, the current security assessment of mobile smart terminals is mainly based on Calculation and analysis based on subjective evaluation, lack of objective safety testing based on safety standards and reasonable integration with quantitative calculation and analysis, the evaluation results are often not convincing

Images