Method, device, and computer storage medium for assessing network security risks of the Internet of Things

Abstract

The invention discloses a method, device and computer storage medium for assessing network security risks of the Internet of Things, including: obtaining equipment information of each Internet of Things device in the Internet of Things to be evaluated; obtaining a subgraph of each Internet of Things device according to a pre-stored knowledge map ; Obtain the eigenvector centrality score of the node where the hardware architecture, operating system, application service, and communication mode are located according to the subgraph; determine the security risk score of the IoT device according to the eigenvector centrality score and the number of security mechanisms used by the IoT device ; Obtain the evaluation score of the Internet of Things to be evaluated according to the security risk score. The present invention calculates the security risks faced by IoT devices in terms of hardware architecture, operating systems, application services, and communication methods through knowledge graph subgraphs containing vulnerability nodes, and comprehensively evaluates the overall security risks of IoT according to security risks and security mechanisms, thereby realizing Preliminary security assessment when IoT devices are not behaving abnormally.

Description

technical field [0001] The invention relates to the technical field of the Internet of Things, in particular to a method, a device and a computer storage medium for assessing network security risks of the Internet of Things. Background technique [0002] With the rapid development of smart grid, smart home, smart medical care, smart transportation and other fields, the market demand for IoT devices continues to grow. Since the Internet of Things includes the content of the perception layer, and most Internet of Things devices have limited hardware resources, it is difficult to implement strict and comprehensive security protection methods in traditional Internet security. important. [0003] Traditional technical means focus on finding security threats and vulnerabilities through the external abnormal performance of IoT devices with the help of security detection equipment, for example, detecting whether the external network traffic of IoT devices is abnormal to determine w...

AI Technical Summary

Problems solved by technology

[0003] Traditional technical means focus on finding security threats and vulnerabilities through the external abnormal performance of IoT devices with the help of security detection equipment, for example, detecting whether the external network traffic of IoT devices is abnormal to determine whether there is a security risk, but this method cannot Pre-evaluate potential risks when IoT devices do not behave abnormally, so as to take preventive measures as early as possible

Images