Functional impairment network security threat identification device and information system

Abstract

The present invention provides a function-impaired network security threat identification device and an information system, the device comprising: a threat behavior judgment definition module, a threat initiator identification module, a threat action asset identification module, a threat path identification module, and a threat capability identification module , a threat occurrence frequency identification module and a threat occurrence timing identification module. The function-impaired network security threat identification device provided by the present invention can comprehensively and accurately identify the function-impaired network security threat, so as to accurately analyze and calculate the risks brought by the function-impaired network security threat; and the present invention provides The information system can accurately take different levels of risk protection measures for different levels of risk of function-damaging network security threats, which improves the security protection performance of the information system provided by the present invention.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a function-impaired network security threat identification device and an information system. Background technique [0002] In recent years, my country's cloud computing, big data, Internet of Things, industrial Internet, artificial intelligence and other new technologies and applications have developed on a large scale, and network security risks have converged and superimposed and evolved rapidly. The application of Internet technology continues to blur the boundary between the physical world and the virtual world, and its integration, penetration, and driving role in the development of the entire economy and society are becoming more and more obvious. The risks and challenges it brings are also increasing, and cyberspace threats and risks are increasing. [0003] Information security risk assessment is the process of evaluating the security attributes such as confi...

AI Technical Summary

Problems solved by technology

[0004] In the network world, there are various types of threats, among which the function damage network security threat is the most common one. The function damage network security threat refers to the unavailability or damage of some functions of business or system operation. However, currently In the prior art, there is a lack of an identification device that can comprehensively and accurately identify function-impairing network security threats, so as to accurately analyze and calculate the risks brought about by function-damaging network security threats, and also lacks an identification device that can target different levels of The risk of functional damage to network security threats, accurately adopt different levels of risk protection measures for information systems

Images