Information security risk assessment method and system based on situation awareness learning

Abstract

The invention discloses an information security risk assessment method and system based on situation awareness learning. The method comprises the following steps: firstly, collecting network securityasset defense information and department personnel organization information; then, preprocessing the collected information; performing format unification, useless data filtering, repeated data mergingand the like on the data; then, in combination with an existing information security risk assessment standard and an existing information security risk assessment model, systematically establishing entry information of the risk assessment model, and finally, grading network security according to the collected information by utilizing a Bayesian network machine learning algorithm. The system comprises an asset defense information collection module, a statistical personnel organization information module, a data set preprocessing module, a risk assessment model establishment module and a network security comprehensive assessment module. According to the invention, a set of more complete risk assessment system is constructed in multiple aspects and multiple ways, and security assessment grading is carried out, so that risk measures are selected in a targeted manner to reduce and control risks.

Description

technical field [0001] The invention relates to the field of information security, in particular to an information security risk assessment method and system based on situation awareness learning. Background technique [0002] With the rapid development of computer technology and communication technology, network attack and defense technology continues to innovate, network threats intensify, and information system security is severely challenged. Network security risk assessment provides a new solution for solving network security threats. basis of control. [0003] However, the existing network security risk assessment is still in the development stage, and a unified assessment index system has not been formed. Due to the different emphasis of the assessment, the assessment results may be quite different, for example: risk assessment method based on the indicator system Although the simplification process of abstract problems can be abstracted, there is a certain degree of...

AI Technical Summary

Problems solved by technology

[0003] However, the existing network security risk assessment is still in the development stage, and a unified assessment index system has not been formed. Due to the different emphasis of the assessment, the assessment results may be quite different, for example: risk assessment method based on the indicator system Although the simplification process of abstract problems can be abstracted, there is a certain degree of subjectivity, which is limited and affected by the experts' own knowledge experience and knowledge fields, and lacks a unified measurement standard and weight determination method; the use of model-based risk assessment system indicators It is relatively single and blind, and does not propose a hierarchical, multi-angle convincing index system model. The network situation prediction model established from this can only analyze the security status of the entire network based on network logs, and cannot effectively reflect future network security. to make targeted defenses

Images