Network-security-risk analysis method based on network node vulnerability and attack information

Abstract

The invention discloses a network-security-risk analysis method based on network-node vulnerability and attack information. The network-security-risk analysis method includes the following steps that 1, the index required by computing the threat degree of a network system is determined; 2, the network topology structure, the network asset property and network asset vulnerability information are obtained; 3, a vulnerability correlation relationship module based on a Petri network is built; 4, attack information detected by an IDS safety device is obtained, and the correlation relationship module is perfected through the attack information; 5, the threat degrees of all nodes in the network system are computed; 6, the network security risk is analyzed according to the threat degree value of all the nodes. According to the network-security-risk analysis method, the vulnerability correlation relationship module of the Petri network built in static analysis is updated in real time through the detected attack information in real time, the threat degrees of all the nodes are accurately computed, the network-risk analysis result is perfected, the analytical ability of the network risk is improved, and the safety of the network is effectively guaranteed.

Description

technical field [0001] The invention relates to a method for constructing a model based on network node vulnerability and attack information and using the model for network security risk analysis, belonging to the technical field of network security. Background technique [0002] In recent years, with the development of technology, computers have been continuously popularized, and the Internet industry has entered a stage of rapid development. The Internet has become an indispensable and important part of people's lives. However, the rapid development of Internet technology has also brought about increasingly prominent network security issues. Traditional passive security defenses have gradually failed to meet the needs. Researchers have devoted themselves to proposing security analysis methods. The key technology to operate and provide a scientific basis for information security is to use scientific methods and means to systematically analyze the risks faced by the network ...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to overcome the deficiencies in the prior art, provide a network security risk analysis method based on network node vulnerability and attack information, and solve the problem of inaccurate security risk analysis results caused by incomplete static information acquisition in the prior art technical issues

Images