Internet of Things network security risk evaluation method and device, and computer storage medium

Abstract

The invention discloses an Internet of Things network security risk evaluation method and device and a computer storage medium. The method comprises the steps of obtaining device information of each Internet of Things device in a to-be-assessed Internet of Things; obtaining a sub-graph of each Internet of Things device according to a pre-stored knowledge graph; obtaining feature vector centrality scores of nodes where the hardware architecture, the operating system, the application service and the communication mode are located according to the sub-graphs; determining a security risk score of the Internet of Things device according to the feature vector centrality score and the number of security mechanisms used by the Internet of Things device; and obtaining an assessment score of the to-be-assessed Internet of Things according to the security risk score. According to the invention, the security risk faced by the Internet of Things equipment in hardware architecture, operating system, application service and communication mode is calculated through the knowledge graph subgraph containing the vulnerability nodes, and the overall security risk of the Internet of Things is comprehensively evaluated according to the security risk and a security mechanism, so that the pre-security evaluation is realized when the abnormal performance of the Internet of Things equipment does not occur.

Description

technical field [0001] The invention relates to the technical field of the Internet of Things, in particular to a method, a device and a computer storage medium for assessing network security risks of the Internet of Things. Background technique [0002] With the rapid development of smart grid, smart home, smart medical care, smart transportation and other fields, the market demand for IoT devices continues to grow. Since the Internet of Things includes the content of the perception layer, and most Internet of Things devices have limited hardware resources, it is difficult to implement strict and comprehensive security protection methods in traditional Internet security. important. [0003] Traditional technical means focus on finding security threats and vulnerabilities through the external abnormal performance of IoT devices with the help of security detection equipment, for example, detecting whether the external network traffic of IoT devices is abnormal to determine w...

AI Technical Summary

Problems solved by technology

[0003] Traditional technical means focus on finding security threats and vulnerabilities through the external abnormal performance of IoT devices with the help of security detection equipment, for example, detecting whether the external network traffic of IoT devices is abnormal to determine whether there is a security risk, but this method cannot Pre-evaluate potential risks when IoT devices do not behave abnormally, so as to take preventive measures as early as possible

Images