A quantitative evaluation method for a network security defense system and a network security evaluation platform

Abstract

The invention belongs to the technical field of information security, and discloses a network security defense system quantitative evaluation method and a network security evaluation platform, which determine all security threats and weights faced by the system; determine the defense vectors and defense action weights of security equipment in the system; Divide the security domain and determine the weight of the security domain; evaluate the security defense capability of the system in the design stage; evaluate the security defense capability of the system in the actual operation stage. The invention divides the evaluation of the protection ability of the safety defense system into two aspects, one is to evaluate the safety defense system in the design stage; the other is to evaluate the safety defense system in the actual operation stage. Quantitatively evaluate the two-dimensional security protection capability of the network security protection system through the attack-defense relationship between the defense capability of the security device and the threat.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a quantitative evaluation method of a network security defense system and a network security evaluation platform. Background technique [0002] At present, the existing technologies commonly used in the industry are as follows: With the rapid development of network information technology, information technology has been applied to various fields, bringing great convenience to life and production. At the same time, there are more and more network security issues, and network attacks are becoming more and more frequent, resulting in leakage of user privacy data, paralysis of Internet services, and huge losses to social interests. Under normal circumstances, a system does not consider the construction of its network security defense system during the network design stage. Instead, after being attacked by a network, technicians begin to deploy various securit...

AI Technical Summary

Problems solved by technology

[0006] (2) Assess the actual system environment without combining the actual effect of security equipment to defend against threats

The security defense capability of the system is determined by the security equipment deployed in the system. Although the security equipment has a specific defense function, it cannot guarantee that the defense function will achieve the theoretical effect, which leads to theoretical security and actual security. deviation between

[0007] (3) The elements affecting network security are not comprehensive enough

If the network security assessment elements are not comprehensive enough, there will be deviations in the final assessment results, which cannot truly reflect the security protection capabilities of the system, and will affect the defender's decision-making on the construction of the security defense system.

Images