Network security efficiency evaluation method based on attack and defense association matrix

Abstract

The invention relates to a network security efficiency evaluation method based on an attack and defense association matrix, belonging to the technical field of information security. The method comprehensively considers system defense capability and impact on system performance, core assets performance and protection capability, services provided by the system and so on after the network is attacked, calculates the attack and defense association matrix and evaluates network security efficiency by adding up weights of multiple discrete points and by using change values of a target network beforeand after attack.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a network security efficiency evaluation method based on an attack-defense correlation matrix. Background technique [0002] The complexity, uncertainty, dynamics of the network information system and the great asymmetry of information between the attacker and the defense are the difficulties in the measurement of security risks, and it is also a difficult problem that network security often faces without foundation and clarity. As the data characteristics of the network information system are diverse and complex, such as: a variety of network system protocols, complex network topology, rich application systems, various network and security equipment systems, and the network system environment is also constantly changing. , such as adding new network nodes, proposing new network protocols, adding new patches, and adding new functions. In general, the hig...

AI Technical Summary

Problems solved by technology

However, the current research still has the following deficiencies: First, it focuses on measuring the effect of attack, ignoring the role of defense, and the effectiveness calculation results are limited and one-sided; inaccuracy

Images