A system and method for comprehensively evaluating security of Internet of things system

Abstract

The invention relates to a network security evaluation technology, aiming at providing a security comprehensive evaluation system and a security evaluation method of an Internet of Things system. In the computer of the system, an information input module, an remote scanning module and an flow analysis module are connected to an risk assessment module by electrical connection. The cloud end serverof the Internet of Things is respectively connected with each Internet of Things device through the Internet, and a flow monitoring module is respectively arranged on the cloud end server of each device of Internet of Things, and each flow monitoring module is bypassed to the flow analysis module and the remote scanning module in an electrical connection mode; The remote scanning module contains aweak password library, PoC detection module and PoC detection script library, and PoC probe. The invention considers the factor of the administrator, and carries out analysis together with the remotesafety scanning and the flow monitoring, and comprehensively carries out safety assessment and analysis. Without intruding into the existing Internet of Things system, neither probes are added in theInternet of Things equipment, nor affect the original Internet of Things cloud server is affected.

Description

technical field [0001] The invention relates to network security assessment technology, in particular to a comprehensive security assessment method for an Internet of Things system. Background technique [0002] The Internet of Things represented by IP cameras is an integrated system composed of many Internet of Things devices and cloud management centers. While this cloud-pipe-device architecture brings convenience to people's lives, it also brings difficulties to security evaluation. Specifically, the system architecture is complex, and there may be security risks in IoT devices and the cloud. The interaction between them expands the complexity, and managers' understanding of security and assets also directly affect the overall security. cyber security. [0003] In recent years, IoT products have developed rapidly, especially network camera products. Manufacturers represented by Dahua, Hikvision, etc. have made these smart devices emerge in IoT products, based on embedd...

AI Technical Summary

Problems solved by technology

The technical defects of this method are: (1) This method must deploy detection nodes and attack nodes, and the evaluation depends on the cooperation of the two, which is complicated and difficult; (2) This method lacks an external perspective similar to that of hackers, and hackers generally use remote Scanning vulnerability method for malicious penetration; (3) This method does not take human and management factors into consideration, often vulnerabilities are caused by management or human factors

Images