An asset scoring method and system based on multi-factor fusion

An asset scoring, multi-factor technology, applied in the field of information security, can solve the problem that the scoring results cannot objectively and truly reflect risk information.

CN109376537AActive Publication Date: 2019-02-22HANGZHOU ANHENG INFORMATION TECH CO LTD
17 Cites 6 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Publication Date
2019-02-22

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides an asset scoring method and a system based on multi-factor fusion. The method comprises the following steps: obtaining an alarm log and a scanning report of an asset to be evaluated; obtaining an alarm log and a scanning report of the asset to be evaluated; according to the preset factor scoring rules, the alarm log and the scanning report are scored to obtain the factor scoring results of the assets to be evaluated; calculating a comprehensive score of the assets to be appraised based on the factor score result, and further calculating a false score of the assets to beappraised; according to the preset asset scoring model, the pseudo-scoring is processed to obtain the target scoring results of the assets to be evaluated, wherein, the target scoring results are usedto represent the risk score of the assets to be evaluated. The invention integrates a plurality of factors to score the assets to be evaluated. Moreover, the unique preset asset scoring model is adopted in the scoring process, which makes the final target scoring results of the assets to be evaluated more objective and comprehensive, and alleviates the technical problem that the scoring results determined by the existing asset scoring methods can not objectively and truly reflect the risk information.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The present invention relates to the technical field of information security, in particular to an asset scoring method and system based on multi-factor fusion. Background technique

[0002] The rapid development of information technology and the wide-scale application of cyberspace have greatly promoted social progress and prosperity, but the issue of information security has become increasingly prominent in the process of information development. In order to prevent problems before they happen, quantitative analysis is carried out on the security alarms triggered by the equipment and asset vulnerabilities, so as to realize the transparency of the risks of various assets of the enterprise, and can take targeted measures against assets, thereby effectively reducing the asset loss of the enterprise.

[0003] The existing asset scoring methods mainly include the following methods: one is qualitative assessment. IBM's ISS X-Force adopts a qualitative vulne...

Examples

Embodiment 1

[0074] According to an embodiment of the present invention, an embodiment of an asset scoring method based on multi-factor fusion is provided. It should be noted that the steps shown in the flow chart of the accompanying drawings can be implemented in a computer system such as a set of computer-executable instructions and, although a logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in an order different from that shown or described herein.

[0075] figure 1 is a flowchart of an asset scoring method based on multi-factor fusion according to an embodiment of the present invention, such as figure 1 As shown, the method includes the following steps:

[0076]Step S102, obtaining alarm logs and scan reports of assets to be evaluated;

[0077] In the embodiment of the present invention, the asset scoring method based on multi-factor fusion can be applied to an asset scoring system. Specifically, when obtaining the alarm log and ...

Embodiment 2

[0154] The embodiment of the present invention also provides an asset scoring system based on multi-factor fusion, which is mainly used to implement the asset scoring method based on multi-factor fusion provided in the above content of the embodiment of the present invention, as follows The asset scoring system based on multi-factor fusion provided by the embodiment of the present invention is specifically introduced.

[0155] Figure 6 is a schematic diagram of an asset scoring system based on multi-factor fusion according to an embodiment of the present invention, such as Figure 6 As shown, the asset scoring system based on multi-factor fusion mainly includes an acquisition module 10, a factor scoring module 20, a calculation module 30 and a processing module 40, wherein:

[0156] An acquisition module, configured to acquire alarm logs and scan reports of assets to be assessed;

[0157] The factor scoring module is used to perform factor scoring on alarm logs and scan rep...