Network safety evaluation method and device based on configuration check

Abstract

The invention provides a network safety evaluation method and device based on configuration check. The network safety evaluation method comprises obtaining information of M target devices of a target system, wherein the information of the target devices comprises types and internet protocols (IP) of the target devices, and M is an integer which is larger than or equal to 1; aiming at each target device, obtaining a baseline check template corresponding to the type of the target device, wherein the baseline check template includes a baseline check item and a baseline safety discrimination rule corresponding to the baseline check item; obtaining configuration information of a baseline item to be checked of the target device in dependence on the IP of the target device and the baseline check item included in the baseline check template; determining the value-at-risk of the target device in dependence on the configuration information of the baseline item to be checked and the baseline safety discrimination rule; and furthermore determining the value-at-risk of the target system. The network safety evaluation method and device based on configuration check can solve the problem that the existing ICS risk evaluation method is poor in visualization.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a network security evaluation method and device based on configuration verification. Background technique [0002] Industrial Control System (Industrial Control System, referred to as: ICS) controls the operation of modern industrial infrastructure (such as power system, oil and gas system, chemical industry system, water conservancy system, traffic control system and industrial manufacturing system, etc.). With the development of modern industrial infrastructure, ICS has transformed from a closed and isolated system to an open and interconnected system. The above-mentioned transformation process brings risks to the information security of ICS. Generally, a risk assessment of ICS is required to evaluate the security of ICS and take remedial measures in time for the risks faced by ICS. [0003] Generally, the ICS of large-scale industrial customers includes equipment...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a network security assessment method and device based on configuration verification to solve the problem of poor intuitiveness of existing ICS risk assessment methods

Images