Quantitative evaluation method for network security defense system, and network security evaluation platform

Abstract

The invention belongs to the technical field of information security, and discloses a quantitative evaluation method for a network security defense system, and a network security evaluation platform.The method comprises the steps of determining all security threats faced by the system and weights; determining defense vector and defense action weights of security equipment in the system; dividinga security domain for the system and determining a weight of the security domain; evaluating a security defense capability of the system in a design stage; and evaluating a security defense capabilityof the system in an actual operation stage. The protection capability evaluation of the security defense system is divided into two aspects: 1, the security defense system in the design stage is evaluated; and 2, the security defense system in the actual operation stage is evaluated. The two-dimensional security protection capability of the network security protection system is quantitatively evaluated through attack and defense relations between the defense capability of the security equipment and the threats.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a quantitative evaluation method of a network security defense system and a network security evaluation platform. Background technique [0002] At present, the existing technologies commonly used in the industry are as follows: With the rapid development of network information technology, information technology has been applied to various fields, bringing great convenience to life and production. At the same time, there are more and more network security issues, and network attacks are becoming more and more frequent, resulting in leakage of user privacy data, paralysis of Internet services, and huge losses to social interests. Under normal circumstances, a system does not consider the construction of its network security defense system during the network design stage. Instead, after being attacked by a network, technicians begin to deploy various securit...

AI Technical Summary

Problems solved by technology

[0006] (2) Assess the actual system environment without combining the actual effect of security equipment to defend against threats

The security defense capability of the system is determined by the security equipment deployed in the system. Although the security equipment has a specific defense function, it cannot guarantee that the defense function will achieve the theoretical effect, which leads to theoretical security and actual security. deviation between

[0007] (3) The elements affecting network security are not comprehensive enough

If the network security assessment elements are not comprehensive enough, there will be deviations in the final assessment results, which cannot truly reflect the security protection capabilities of the system, and will affect the defender's decision-making on the construction of the security defense system.

Images