Network security risk assessment method and device

Abstract

The embodiment of the invention provides a network security risk assessment method and device. The method comprises the following steps: acquiring historical attribute information of Internet assets in a target range in a preset time period, and constructing a correlation analysis model, wherein the historical attribute information comprises asset level attribute information, asset distance attribute information, asset alarm attribute information, asset network attribute information and asset industry attribute information; obtaining current attribute information of Internet assets in a target range in a target time window, inputting the current attribute information into the association analysis model, and outputting risk asset information in the target time window, wherein the current attribute information comprises asset alarm attribute information, asset network attribute information and asset industry attribute information; and according to the risk asset information, determining a network security risk value of the Internet assets in the target range in the target time window. According to the method, assets in the platform are successfully associated, so that the association analysis model has more accurate evaluation capability.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network security risk assessment method and device. Background technique [0002] Assets refer to the resources formed by the past transactions or events of the enterprise, owned or controlled by the enterprise, and expected to bring economic benefits to the enterprise. As network security issues become more and more serious, the security of Internet assets and the assessment of network security risks are getting more and more attention. By assessing network security risks, it can prompt that there are potential security risks in the network, facilitate timely investigation, and effectively guarantee the security of Internet assets. [0003] The current network security risk assessment methods usually only conduct network security risk assessment on the risk situation of isolated assets. Such an assessment method will result in inaccurate network security risk assess...

AI Technical Summary

Problems solved by technology

Such an assessment method will result in inaccurate network security risk assessment, and cannot realize the prediction of future alarms, thus making the results of network security risk assessment lose reference value, which is not conducive to network security prevention

Images