Multi-dimensional and multi-granularity network space security measurement method

Abstract

The invention discloses a multi-dimensional and multi-granularity network space security measurement method. The multi-dimensional and multi-granularity network space security measurement method comprises the following steps: dividing a network system into three hierarchies according to logical hierarchy, wherein the three hierarchies are reliability security, environment security and vulnerability security separately; extracting and selecting indexes in the network system according to the three hierarchies, and establishing a network space security index system by means of the system engineering principle and the analytic hierarchy process (AHP); performing dimensional division on each hierarchy based on the established network space security index system; wherein the reliability securityis measured by a weak connectivity dimension and a strong connectivity dimension, the environment security is measured by a network asset and service dimension and an asset index change dimension, and the vulnerability security is measured by a vulnerability dimension and an attack graph dimension; and adding the granularity on the basis of the hierarchy and dimension, and obtaining the measurement values of each hierarchy and each dimension within the specified range of the granularity, wherein the sum is the network space security measurement result. Using the multi-dimensional and multi-granularity network space security measurement method, the measurement results are more accurate and comprehensive.

Description

technical field [0001] The invention relates to the technical field of cyberspace security, in particular to a multi-dimensional and multi-granularity cyberspace security measurement method. Background technique [0002] The network is developing faster and faster, but the development of cyberspace security cannot keep up with the pace. Therefore, we must improve the security of our country's network as soon as possible. Without evaluation, there is no improvement. It can be seen that network measurement and evaluation are very necessary for the improvement of cyberspace security. [0003] For cyberspace security measurement and evaluation methods, there are already some common methods and models. Analytic Hierarchy Process (AHP) is currently the mainstream analysis method, but there are problems in AHP that the division of levels is not clear, and the measurement is not objective enough due to the weight of experts. In order to solve these problems, some new methods are ...

AI Technical Summary

Problems solved by technology

Although the attack graph can well simulate all potential attack paths in the network and measure all the attacks and vulnerabilities in the network, the attack graph ignores the failure of the attack path, that is, the failure of the attack path due to network defense during the attack process. attack cannot generate

Moreover, since all possible attack paths are generated during the attack graph generation process, and the starting point and end point of the attack are not specified, there is a problem of too many simulated attack paths

If the network scale is too large, even if distributed computing is used, the amount of calculation is still very large

Images