Network security risk assessment method

Abstract

The invention discloses a network security risk assessment method. The security of a target network is assessed dynamically by combining an intrusion detection system, vulnerability detection and real-time attack events obtained by a third party on the basis of static risk assessment. With regard to risk assessment, the asset value is usually defined by specialists or managers during static assessment and no great change occurs in a certain period; dynamic changes of threatening and vulnerable information can be assessed by aid of corresponding tools; the intrusion detection system and a firewall are taken as monitoring systems and can warn of anomalous events at any time, and warning information is possible threats to a system and is also an important basis for assessment of a system risk condition. With the adoption of the network security risk assessment method, the accuracy and instantaneity of network risk assessment can be improved effectively, security defense measures can be carried out according to risk assessment results, and risks can be controlled effectively in time.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a network security risk assessment method. Background technique [0002] There are two main types of network security risk assessment methods: static assessment and dynamic assessment. Static assessment comprehensively evaluates the risk level of the network by statically evaluating the value of the target network, security vulnerabilities, and the frequency of security incidents. Currently, the information security risk assessment methods used by people are basically limited to static assessment methods. The research on dynamic network security risk assessment is still in the exploratory stage at home and abroad, and the risk assessment is mainly based on two aspects based on vulnerabilities and threats. [0003] The vulnerability-based risk assessment method uses existing vulnerability scanning tools to assist in finding vulnerabilities that may be exploited by threa...

AI Technical Summary

Problems solved by technology

Threat-based risk assessment methods cannot effectively restore attack scenarios and predict attack behavior

[0006] At present, the research on network security risk assessment is still in the stage of continuous exploration. No matter whether the vulnerability-based or threat-based risk assessment method is used to analyze network security risks, a good solution has not yet been found.

Images