Information service security evaluation method and device

Abstract

The invention provides an information service security evaluation method and device, and the method comprises the steps: combining a security evaluation program with the configuration information of an information service system needing to be evaluated, and forming a plurality of security evaluation examples; assigning a priority to each security evaluation instance; adding the security evaluationinstance into a message queue as a message object; sorting the security evaluation instances in the message queue according to priorities from high to low; and taking out the security evaluation instance from the message queue for execution and obtaining a security evaluation result. According to the method, information service security evaluation can be realized on the premise of easiness in use, high efficiency and low cost.

Description

technical field [0001] The invention relates to the field of computer application technology, in particular to an information service security evaluation method and device. Background technique [0002] With the rapid development of cloud computing technology, more and more information service systems are deployed on cloud computing platforms. Because cloud computing platforms are based on virtualization technology, resources such as computing, storage, and networks can be dynamically allocated and recycled, and information service systems are also It can be installed, deployed, operated and destroyed quickly, so it is also facing new challenges to ensure the security of the information service system on the cloud computing platform. [0003] In recent years, the security situation faced by the information service system on the cloud computing platform has become increasingly severe. New types of viruses and network attacks emerge in an endless stream, which may pose a threa...

AI Technical Summary

Problems solved by technology

[0005] Although this method can complete the security evaluation work for information service systems, because the information service systems can be quickly installed and deployed on the cloud computing platform, the number of information service systems will be very large, and in order to detect new types of viruses and network attacks , the number of security evaluation programs is very large and will increase at any time, resulting in the disadvantages of this traditional evaluation method and system, such as inconvenient use, slow detection speed, and high cost for large-scale simultaneous detection

Images