Individual network security awareness grading quantitative evaluation method

Abstract

The invention provides an individual network security awareness grading quantitative evaluation method for the problems of fuzzy definition of network security awareness and lack of an effective assessment system and method at present. The method comprises three parts including subjective consciousness assessment, behavior ontology assessment and assessment decision making. In the subjective consciousness assessment part, individual information is obtained through questionnaire survey; four dimensions including information security awareness, information legal ethics, information security knowledge and information security capability are scored through an analytic hierarchy process; and scores of an individual user in the four dimensions are obtained. In the behavior ontology assessment part, computer and mobile phone user behaviors are scanned; a direct distance with the optimal user behavior is calculated; and the security levels of the user behaviors are judged through a random forest algorithm. By fusing the subjective consciousness assessment and the behavior ontology assessment, the individual network space security awareness level is assessed. An experimental result shows that the method can realize individual network security awareness grading quantization in combination with a machine learning method, the granularity is reduced from high to low and is not less than the4 level, and the grading accuracy is more than 95%. The method can be used for improving the comprehensiveness and universality of an individual network security awareness grading quantitative model,and has a certain practical value.

Description

technical field [0001] The invention relates to a grading and quantitative evaluation method for individual network security awareness, and belongs to the technical field of computer and information science. Background technique [0002] Most of the existing network security awareness assessment methods rely on subjective evaluation and statistical methods. The evaluation factor is single and lacks objectivity; pure statistics cannot describe the complex structural characteristics of the problem. In response to these problems, based on the basic theory of information security and the game theory of information attack and defense, combined with the latest information security attack and defense confrontation methods and network security awareness evaluation feature sets, a comprehensive evaluation data dimension, comprehensive evaluation content, and evaluation results have guiding value. The network security awareness evaluation model, the evaluation results are divided int...

AI Technical Summary

Problems solved by technology

[0011] The purpose of the present invention is to solve the current problem of vague definition of network security awareness and lack of effective evaluation systems and methods, to carry out research on hierarchical and quantitative methods of network security awareness, combine multi-dimensional key factors, multi-granularity c

Images