Asset risk assessment method and device, computer equipment and storage medium

Abstract

The invention relates to an asset risk assessment method and device, computer equipment and a storage medium, and the method comprises the steps: receiving the alarm information of to-be-assessed assets; acquiring an attack depth of the alarm information based on the alarm information, wherein the attack depth is the attack degree of the assets to be assessed; obtaining a safety characteristic value of the asset to be assessed; obtaining a feature weight of the security feature value based on the attack depth; and performing risk assessment on the assets to be assessed based on the security feature values and the feature weights thereof to obtain a risk assessment result. According to the asset risk assessment method and device, the computer equipment and the storage medium, the attack depth of the alarm information is used as the standard, the feature weight of each security feature value of the asset is determined, the asset risk is automatically assessed, dependence on manual experience is not needed, and the assessment efficiency and accuracy are improved.

Description

technical field [0001] The present application relates to the technical field of information security, in particular to an asset risk assessment method, device, computer equipment and storage medium. Background technique [0002] According to the security needs of the country and units for network assets, security personnel must ensure the confidentiality, integrity, and availability of information systems and the information transmitted and stored. In the case of too many assets, too many security devices and the alarms they generate, it is difficult to understand the security status of the assets and deal with them in a timely manner, and the security inspection process lacks focus and is slow. [0003] In the traditional method of asset risk assessment, the weight judgment of each characteristic value of the asset depends on expert knowledge, and the weight of the characteristic value directly affects the evaluation result, which is inefficient and inaccurate. Contents ...

AI Technical Summary

Problems solved by technology

[0004] The embodiment of the present application provides an asset risk assessment method, device, computer equipment, and storage medium to at least solve the problem that in the traditional method of asset risk assessment in the related art, the weight judgment of each feature value depends on expert knowledge, feature The size of the value weight directly affects the evaluation result, the problem of low efficiency and low accuracy

Images