Information safety risk evaluation system accurate in evaluation

Abstract

The invention provides an information safety risk evaluation system accurate in evaluation. The information safety risk evaluation system includes a risk identification module, a risk calculation module, a risk evaluation module and a risk management module, wherein the risk identification module is used for identifying information safety risks, the risk calculation module is used for calculatinginformation safety risk values according to identification results, the risk evaluation module is used for evaluating the information safety risks according to the information safety risk values, andthe risk management module is used for processing and controlling the information safety risks according to evaluation results; the risk identification module includes a first risk identification unit, a second risk identification unit and a third risk identification unit, wherein the first risk identification unit is used for identifying property, the second risk identification unit is used for identifying threats which an information system faces, and the third risk identification unit is used for identifying risk-resistant capabilities of the information system. The information safety riskevaluation system accurate in evaluation has the advantage of achieving accurate information safety risk evaluation.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an information security risk assessment system with accurate assessment. Background technique [0002] With the development of informatization and economic globalization, the Internet has penetrated into every aspect of people's lives and brought tremendous changes to people's lives. On the one hand, due to the openness of the Internet, the defects of the information system itself, the leakage of sensitive information, the proliferation of computer viruses, and hacker intrusions, etc., have caused various information systems and platforms to face huge security risks, and information security issues have become increasingly prominent; On the one hand, new network environments continue to emerge, such as big data and cloud computing, which further aggravate information security issues. [0003] Information security risk assessment refers to the identification, measure...

AI Technical Summary

Problems solved by technology

On the one hand, due to the openness of the Internet, the defects of the information system itself, the leakage of sensitive information, the proliferation of computer viruses, and hacker intrusions, etc., have caused various information systems and platforms to face huge security risks, and information security issues have become increasingly prominent; On the one hand, new network environments continue to emerge, such as big data, cloud computing, etc., which further aggravate information security issues

Images