Attack surface modeling method and device for redundant information system

Abstract

The invention discloses an attack surface modeling method and device for a redundant information system, which is applied to the redundant information system. The redundant information system consistsof multiple sub-systems with equivalent functions. The method comprises the steps of identifying an attack surface resource of each sub-system in the redundant information system, performing attack surface modeling on each sub-system, determining attack cost-effective ratio of each attack surface resource according to security threat degree and use difficulty of each attack surface resource, analyzing a behavior operation of an attack surface of sub-systems in the redundant information system according to a structure characteristic of the redundant information system, executing the attack surface behavior operation in the redundant information system, then determining the overall attack surface of the redundant information system, and delivering a corresponding measurement result according to attack cost-effective ratio of each attack surface resource and the overall attack surface of the redundant information system. Through adoption of the method, security of the redundant information system with complex structure can be measured, and the information system is safer.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to an attack surface modeling method and device suitable for redundant information systems. Background technique [0002] With the improvement of the degree of social informatization, the impact of cyberspace security issues on economy, politics and people's livelihood is becoming more and more serious. In particular, in recent years, major cyberspace security incidents caused by information leakage have occurred frequently, making how to ensure the security of information systems has become a hot issue in cyberspace that needs to be resolved urgently. Effective evaluation of information system security is a direct way to measure, enhance or improve information system security. Therefore, the evaluation of information system security is of great significance for improving the ecological environment of cyberspace. [0003] As an important indicator to measure sys...

AI Technical Summary

Problems solved by technology

[0004] However, the current attack surface model is only suitable for the security measurement of single-redundancy information systems, and cannot effectively measure the security of redundant complex structural systems.

Although Manadhata once proposed the concept of attack surface transfer for moving target defense technology, it still cannot fully and effectively adapt to redundant complex structural systems

Images