Method for threat quantification of enterprise risk values
A value-at-risk, enterprise technology, applied in key distribution to achieve the effect of intuitive viewing
Pending Publication Date: 2021-04-16
江苏天翼安全技术有限公司
View PDF4 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0002] In the prior art, there are methods for computers to detect enterprise threats. The general threat detection method is a separate host-based threat detection, or a separate network-based threat detection, and there is no simultaneous detection of host and network threats. , and a more accurate method of quantifying the quantitative value of enterprise threats, it is difficult for users to have a more intuitive understanding of the severity of threats
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0023] The technical solutions of the present invention will be described in detail below, but the protection scope of the present invention is not limited to the embodiments.
[0024] A method for quantifying the risk value of an enterprise, using a combination of a network threat detection engine and a host-based intrusion detection system to correlate and test threats. The network threat detection engine is deployed on the central manager, such as figure 1 Shown, the main steps of the method that the present invention proposes comprises:
[0025] Step 1: Based on network threat detection, use an AI Engine network threat detection engine, which can perform intrusion detection, intrusion prevention, network security monitoring and offline pcap packet file processing in real time, and perform network layer detection. The network threat detection The engine is aimed at a certain network hardware device (such as centos7 system, which includes a network hardware device eth0, whic...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a method for threat quantification of enterprise risk values. The method uses a network-based threat detection engine and a host-based intrusion detection system to perform association threat test, the network threat detection engine is deployed on a central manager, and after the network threat is detected, the host-based intrusion detection system performs association threat test; summarizing the threat information into an engine for host detection, analyzing threats through an AI engine to obtain a risk detection result, and finally obtaining a threat risk value through formula operation. Threat detection based on the network and intrusion detection based on the host are organically combined, the operability is high, the network security and the enterprise business security and stability can be effectively maintained, the threat risk of the enterprise can be more visually seen through the threat risk value, and convenience is provided for disguise agency deployment of small and medium-sized enterprises.
Description
technical field [0001] The invention relates to the field of computer information security detection, in particular to a method for threatening and quantifying enterprise risk value. Background technique [0002] In the prior art, there are methods for computers to detect enterprise threats. The general threat detection method is a separate host-based threat detection, or a separate network-based threat detection, and there is no simultaneous detection of host and network threats. , and more accurately quantify the quantitative value of enterprise threats, it is difficult for users to have a more intuitive understanding of the severity of threats. Therefore, the technical problem to be solved by this technical solution is how to combine the two, so as to detect both host threats and network threats. Contents of the invention [0003] Purpose of the invention: The purpose of the present invention is to address the deficiencies of the prior art and provide a method for thre...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06H04L9/08
Inventor 宋彦春郑昭翼胡惠
Owner 江苏天翼安全技术有限公司