Security risk assessment method and device, equipment and computer readable storage medium

Abstract

The embodiment of the invention discloses a security risk assessment method. The method comprises the steps of collecting risk data for security risk assessment; under the condition that the collectedrisk data does not reach the threshold value, counting the frequency of safety event items occurring in the safety type and the risk value of the safety event items based on the risk data, and determining the safety risk loss value of the safety type; according to the safety risk loss value of the safety type and a defined safety risk loss value, calculating and obtaining a safety risk quantizedvalue; under the condition that the collected risk data reaches a threshold value, inputting the collected risk data into a trained machine learning model, and calculating and obtaining a safety riskquantitative value. The safety risk loss value is calculated according to conditions, the safety risk initial value can be manually defined and calculated through expert experience in the early stage,the safety risk loss value is automatically calculated through a machine learning mode in the later stage, and the safety risk quantized value of an enterprise can be more comprehensively and accurately calculated.

Description

technical field [0001] The present invention relates to the field of computers, in particular to a security risk assessment method, a security risk assessment device, a security risk assessment device and a computer-readable storage medium. Background technique [0002] Under the background of today's Internet of Everything, various fields are rapidly promoting digital transformation. Enterprises from all walks of life have basically connected to this intelligent environment in various ways. More and more data, services, computing, and equipment Flooding into the virtual cyberspace, enterprises generally face security risks such as attacks, detection, and theft from cyberspace. [0003] In recent years, all parties have been clearly aware of the threat of cyber risk, and have gradually launched or increased research on cyber risk assessment and control. For example, for network risk assessment, one of the widely recognized solutions is to quantify network risk. Its main ide...

AI Technical Summary

Problems solved by technology

For example, for network risk assessment, one of the widely recognized solutions is to quantify network risk. Its main idea is to use a number to measure the network risk of an enterprise. Existing technologies generally consider the impact on network security in the process of quantification. Various factors, such as the frequency of reports of exploited security vulnerabilities, the frequency of reports of domain name hijacking, the value of the assets in cyberspace, etc.; however, with the continuous advancement of information technology in various industries, cyberspace has become more and more complex. The simple method of quantifying cyber risk is no longer applicable, especially for enterprises in the information age

Images