Safety risk assessment method, device, equipment and computer-readable storage medium

Abstract

The embodiment of the present invention discloses a security risk assessment method, including: collecting risk data for security risk assessment; in the case that the collected risk data does not reach the threshold, counting the frequency of security event items occurring in the security type based on the risk data and The risk value of the security event item determines the security risk loss value of the security type; calculates the security risk quantification value according to the security risk loss value of the security type and the defined security risk loss value; when the collected risk data reaches the threshold value, Input the collected risk data into the trained machine learning model, and calculate the quantified value of security risk; adopt the present invention to calculate the value of security risk loss according to the situation, and in the early stage, the initial value of security risk can be manually defined through expert experience, and the security risk can be calculated The loss value, in the later stage, automatically calculates the security risk loss value through machine learning, which can more comprehensively and accurately calculate the security risk quantification value of the enterprise.

Description

technical field [0001] The present invention relates to the field of computers, in particular to a security risk assessment method, a security risk assessment device, a security risk assessment device and a computer-readable storage medium. Background technique [0002] Under the background of today's Internet of Everything, various fields are rapidly promoting digital transformation. Enterprises from all walks of life have basically connected to this intelligent environment in various ways. More and more data, services, computing, and equipment Flooding into the virtual cyberspace, enterprises generally face security risks such as attacks, detection, and theft from cyberspace. [0003] In recent years, all parties have been clearly aware of the threat of cyber risk, and have gradually launched or increased research on cyber risk assessment and control. For example, for network risk assessment, one of the widely recognized solutions is to quantify network risk. Its main ide...

AI Technical Summary

Problems solved by technology

For example, for network risk assessment, one of the widely recognized solutions is to quantify network risk. Its main idea is to use a number to measure the network risk of an enterprise. Existing technologies generally consider the impact on network security in the process of quantification. Various factors, such as the frequency of reports of exploited security vulnerabilities, the frequency of reports of domain name hijacking, the value of the assets in cyberspace, etc.; however, with the continuous advancement of information technology in various industries, cyberspace has become more and more complex. The simple method of quantifying cyber risk is no longer applicable, especially for enterprises in the information age

Images