Method, device and device for determining safety status

Abstract

The present application provides a method, device, and equipment for determining a security state, the method comprising: acquiring an attack graph corresponding to equipment assets, the attack graph including an attack subgraph corresponding to a target terminal; the attack subgraph including vulnerability exploit rule nodes and the precondition node of the exploit rule node, the precondition node at least includes the security vulnerability node of the target terminal; determine the conditional probability of each node in the attack graph, and generate an asset Bayesian graph , the asset Bayesian graph includes the conditional probability of each node in the attack graph; determine the target probability of the device asset being attacked based on the asset Bayesian graph; determine the device asset based on the target probability security status. Through the technical solution of the present application, the attack probability of equipment assets is directly deduced according to the Bayesian conditional probability, which greatly saves computing resources.

Description

technical field [0001] The present application relates to the field of communications, and in particular, to a method, apparatus and device for determining a security state. Background technique [0002] Due to the continuous development of hacking technology, new types of information security loopholes are constantly being excavated, and attackers can use the information security loopholes of assets to attack assets, causing various network information security incidents to occur frequently, causing heavy losses to enterprises and the country. The information security risk assessment method can be used to identify and analyze the information security vulnerabilities of the assets, timely discover the security weak links of the assets, and avoid the occurrence of information security incidents that may have a huge impact. [0003] However, with the continuous acceleration of the informatization process, the network and information systems are becoming more and more complex, ...

AI Technical Summary

Problems solved by technology

[0003] However, with the continuous acceleration of the informatization process, the network and information systems are becoming more and more complex, the attack methods of hackers are changing with each passing day, and the frequency of attacks is also changing. How to identify and analyze the information security vulnerabilities of assets and discover the existence of assets in time The security weaknesses of the

Images