A network threat situation assessment method and device

Abstract

The invention aims at providing a network threat situation evaluation method and device. According to the method and the device, to-be-evaluated network detection data in a network system is obtained; the to-be-evaluated network detection data is preprocessed, thereby obtaining target network detection data; and network threat situation evaluation is carried out on the target network detection data, thereby obtaining a threat situation evaluation result of the network system. The consumption of manpower and material resources for artificially collecting and processing the to-be-evaluated network detection data can be avoided; the evaluation efficiency of carrying out the network threat situation evaluation on the target network detection data needing to be evaluated is improved; moreover, the accuracy of the target network detection data is ensured and a current threat situation of the network can be accurately reflected by the obtained threat situation evaluation result; and the network thread situation smart evaluation is carried out on the network system, and moreover, the accuracy of carrying out the network thread situation evaluation on the network system is improved.

Description

technical field [0001] The present application relates to the field of computers, and in particular to a method and device for network threat situation assessment. Background technique [0002] With the rapid popularization of the Internet, there are more and more attacks against the network, and the attack methods and attack technologies are constantly updated. Although network security technologies such as firewalls and intrusion detection systems are becoming more and more mature, in reality, there are always some attacks that can succeed. Practice has proved that the pre-identification of computer network security risks and the assessment of network security are very important, which objectively requires us to have a complete security assessment system and strengthen the security assessment of the network. [0003] However, in the existing network information security assessment technology, since there is no unified assessment standard, in the process of network informat...

AI Technical Summary

Problems solved by technology

[0004] One purpose of this application is to provide a network threat situation assessment method and equipment to solve the problems of low efficiency and low accuracy caused by threat situation assessment of network systems in the prior art

Images