An extended knowledge map and construction method and system for information security risk assessment

Abstract

The present invention belongs to the technical field of information security, artificial intelligence and database, and specifically relates to an extended knowledge map and construction method and system for information security risk assessment, including the following steps: constructing an entity, including at least the evaluation target entity T and the evaluation target entity T All evaluation index entities M within a specific time range; construct the relationship type between the evaluation target entity T and the evaluation index entity M; construct the calculation process of knowledge map data expansion, aging, prediction and aggregation; use the constructed entity, the constructed The relationship type and the calculation process of construction form an extended knowledge graph of information security risk assessment. In the present invention, the evaluation index data is also graph-based modeling, so that the evaluation index information is also included in the traditional information security knowledge map, and a sufficient association is established with the evaluation object, thereby bringing convenience to risk evaluation, improving query efficiency and maintainability sex.

Description

technical field [0001] The invention belongs to the technical fields of information security, artificial intelligence and databases, and specifically relates to an extended knowledge map for information security risk assessment and a construction method and system. Background technique [0002] Information security assessment refers to the process of quantifying and evaluating information security status and trends by using a specific index system and quantitative algorithm. It is also often called information security situational awareness. Information security assessments include institutional security risk assessments, security event severity assessments, and security threat hazard assessments. The evaluation index system is a combination of a series of specific index values. These index values ​​have a certain hierarchical relationship and are in the process of dynamic change. The index value is obtained after certain processing of quantitative features. Quantitative c...

AI Technical Summary

Problems solved by technology

In these schemes, after the above-mentioned evaluation targets are graphed and modeled, they are used as graph entities, combined with the relationships between these entities, to form an integrated knowledge graph, but these schemes ignore the graph of the index system, thus Inability to establish a complete, orderly, and sufficient association with the evaluation target, resulting in inconvenience of information security risks, low query efficiency, and poor maintenance performance

Images