A method and system for constructing a network information evaluation index system based on a decision network diagram

Abstract

The present invention discloses a method and system for constructing a network information evaluation index system based on a decision network diagram. The method includes: obtaining multiple network information evaluation indicators and logical associations between the indicators, generating an initial decision network diagram according to the network information evaluation indicators and the logical associations between the corresponding indicators, and performing inference on the logical associations between the indicators for each indicator decision point in the initial decision network diagram to obtain a final decision network diagram. The present invention introduces a decision network diagram tool, which generates an initial decision network diagram by using indicators as indicator decision points, multiple indicators as category nodes, and the relationships between indicators as logical connecting lines, and models the indicator system construction problem as a solution decision problem; then performing inference on the logical associations between the indicators for each indicator decision point in the initial decision network diagram to obtain a final decision network diagram, thereby reducing the complexity of the decision problem. The efficiency and quality of the construction of the network information evaluation index system can be effectively improved.

Description

Technical Field

[0001] The present invention relates to the field of information processing technology, and in particular to a method and system for constructing a network information evaluation index system based on a decision network diagram. Background Art

[0002] As modern warfare evolves from mechanization and informatization to intelligence, the world's major powers have all turned their attention to the network information system (referred to as the network information system), and are actively preparing for the construction of network information for future wars. At present, China is actively promoting digital modernization. Taking cyberspace activities as an example, the budget demand for fiscal year 2020 is US$9.6 billion, an increase of US$900 million (about 10.4%) over 2019, and the budget for fiscal year 2021 continues to increase to US$9.8 billion, aiming to enhance the competitive advantage in the field of network information.

[0003] Because the cybersecurity and informatization system is very important and developing rapidly, the academic community has carried out a lot of exploratory research work. For example, Academician Lu Jun made an in-depth explanation of the cybersecurity and informatization system from the two perspectives of human social development and information system development, believing that the cybersecurity and informatization system is the basic form of human society, and demonstrated the rationality and inevitability of the birth of the cybersecurity and informatization system. Based on this, the development trend of the cybersecurity and informatization system has been studied, and a resilient cybersecurity and informatization system architecture has been proposed; the winning mechanisms of the cybersecurity and informatization system such as structural agile adaptation, information value-added and agile collaboration have been analyzed, and the operating mechanism of the cybersecurity and informatization system has been summarized from the perspectives of network-centric, information-dominated, knowledge-driven and system-enabled, etc.

[0004] Although the research on cybersecurity and informatization system is very popular, there are relatively few achievements in the evaluation index system. There are still problems of inefficiency and low quality in the generation of evaluation index system in the field of cybersecurity and informatization. Summary of the invention

[0005] The present invention aims to at least solve the technical problems existing in the prior art. To this end, the present invention proposes a method and system for constructing a network information evaluation index system based on a decision network diagram, which can effectively improve the quality and efficiency of the index system.

[0006] A first aspect of the present invention provides a method for constructing a network security evaluation index system based on a decision network diagram, comprising the following steps:

[0007] Obtaining a plurality of network security evaluation indicators and a logical correlation relationship between each two of the network security evaluation indicators;

[0008] Generate an initial decision network diagram according to the network security evaluation indicators and the corresponding logical association relationship between the indicators; wherein the initial decision network diagram includes indicator decision points, category nodes and logical association lines, the indicator decision points are the network security evaluation indicators, each category node includes a number of the indicator decision points, and the logical association line is used to characterize the logical association relationship between the indicators between every two indicator decision points;

[0009] The logical association relationship between indicators is inferred for each indicator decision point in the initial decision network diagram to obtain a final decision network diagram.

[0010] According to the embodiments of the present invention, there are at least the following technical effects:

[0011] This method introduces a decision network diagram tool to solve the problem of constructing a cybersecurity and informatization system evaluation index system. By taking indicators as indicator decision points, multiple indicators forming category nodes, and the relationship between indicators as logical connecting lines, an initial decision network diagram is generated, and the indicator system construction problem is modeled as a solution decision problem. Then, the logical correlation relationship between indicators is inferred for each indicator decision point in the initial decision network diagram to obtain the final decision network diagram, reducing the complexity of the decision problem. This method can effectively improve the efficiency and quality of the construction of a cybersecurity and informatization evaluation index system.

[0012] According to some embodiments of the present invention, the category nodes include one type of indicator decision points, two types of indicator decision points and three types of indicator decision points, wherein the one type of indicator decision points include the indicator decision points without logical relationship input, the two types of indicator decision points include the indicator decision points with logical relationship input determined by the source end and without logical relationship output, and the three types of indicator decision points include the indicator decision points with logical relationship input not determined by the source end or with both logical relationship input and output.

[0013] According to some embodiments of the present invention, according to the decision complexity of the indicator, the logical association relationship between indicators is inferred for each indicator decision point in the first category of indicator decision points, the second category of indicator decision points and the third category of indicator decision points.

[0014] According to some embodiments of the present invention, the step of performing inference on the logical association relationship between indicators for each indicator decision point in the initial decision network diagram to obtain the final decision network diagram includes:

[0015] Reasoning about the decision points of the above-mentioned indicator class:

[0016] When there is a current first indicator decision point that has not been processed in the type of indicator decision points, decision processing is performed on the current first indicator decision point, and logical reasoning is performed on the corresponding indicator decision points that have a logical relationship with the current first indicator decision point according to the logical association line to obtain a first reasoning decision result, and the initial decision network diagram is updated according to the first reasoning decision result;

[0017] After the reasoning of the first type of indicator decision points is completed, the second type of indicator decision points are reasoned:

[0018] When there is a current second indicator decision point that has not been processed in the two types of indicator decision points, the current second indicator decision point is processed, and logical reasoning is performed on the corresponding indicator decision points that have a logical relationship with the current second indicator decision point according to the logical association line to obtain a second reasoning decision result, and the initial decision network diagram is updated according to the second reasoning decision result;

[0019] After the reasoning of the two-category indicator decision point is completed, the three-category indicator decision point is reasoned:

[0020] When there is a current third indicator decision point that has not been processed among the three types of indicator decision points, decision processing is performed on the current third indicator decision point, and logical reasoning is performed on the corresponding indicator decision points that have a logical relationship with the current third indicator decision point according to the logical association line to obtain a third reasoning decision result, and the initial decision network diagram is updated according to the third reasoning decision result;

[0021] After the reasoning of the three types of indicator decision points is completed, the final decision network diagram is obtained.

[0022] According to some embodiments of the present invention, decision processing is performed on the current first indicator decision point, the current second indicator decision point, or the current third indicator decision point respectively through expert experience.

[0023] According to some embodiments of the present invention, the inter-indicator logical association relationship between every two network security evaluation indicators is screened from the network security evaluation statistical indicator library.

[0024] A second aspect of the present invention provides a system for constructing a network information evaluation index system based on a decision network diagram, comprising:

[0025] A data acquisition module, used to acquire a plurality of network security evaluation indicators and a logical association relationship between each two network security evaluation indicators;

[0026] A decision network diagram generation module, used to generate an initial decision network diagram according to the network security evaluation indicators and the corresponding logical association relationship between the indicators; wherein the initial decision network diagram includes indicator decision points, category nodes and logical association lines, the indicator decision points are the network security evaluation indicators, each category node includes a number of indicator decision points, and the logical association line is used to characterize the logical association relationship between indicators between every two indicator decision points;

[0027] The decision network diagram reasoning module is used to reason about the logical association relationship between indicators for each indicator decision point in the initial decision network diagram to obtain the final decision network diagram.

[0028] According to the embodiments of the present invention, there are at least the following technical effects:

[0029] This system introduces a decision network diagram tool to solve the problem of constructing a cybersecurity and informatization system evaluation index system. By taking indicators as indicator decision points, multiple indicators constitute category nodes, and the relationship between indicators as logical connecting lines, an initial decision network diagram is generated, and the indicator system construction problem is modeled as a solution decision problem; then, each indicator decision point in the initial decision network diagram is inferred from the logical correlation relationship between indicators to obtain the final decision network diagram, reducing the complexity of the decision problem. This system can effectively improve the efficiency and quality of the construction of the cybersecurity and informatization evaluation index system.

[0030] According to a third aspect of the present invention, an electronic device is provided, comprising at least one control processor and a memory for communicating with the at least one control processor; the memory stores instructions executable by the at least one control processor, and the instructions are executed by the at least one control processor so that the at least one control processor can execute the above-mentioned method for constructing a network security evaluation indicator system based on a decision network diagram.

[0031] A fourth aspect of the present invention provides a computer-readable storage medium storing computer-executable instructions, wherein the computer-executable instructions are used to enable a computer to execute the above-mentioned method for constructing a network security evaluation indicator system based on a decision network diagram.

[0032] It should be noted that the beneficial effects between the third aspect and the fourth aspect of the present invention and the prior art are the same as the beneficial effects between the above-mentioned method for constructing a network information evaluation index system based on a decision network diagram and the prior art, and will not be described in detail here.

[0033] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0035] Figure 1 A schematic diagram representing a decision network diagram method provided by an embodiment of the present invention;

[0036] Figure 2 A schematic diagram of a process for constructing a network information evaluation index system based on a decision network diagram provided by an embodiment of the present invention;

[0037] Figure 3 A schematic flow chart of a method for constructing a network information evaluation index system based on a decision network diagram provided by another embodiment of the present invention;

[0038] Figure 4 A schematic flow chart of a method for constructing a network information evaluation index system based on a decision network diagram provided by another embodiment of the present invention;

[0039] Figure 5 A schematic diagram of the structure of a network security evaluation index system construction system based on a decision network diagram is provided for one embodiment of the present invention. DETAILED DESCRIPTION

[0040] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be understood as limiting the present invention.

[0041] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "axial", "radial", "circumferential" and the like indicate positions or positional relationships based on the positions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the system or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. In addition, features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the present invention, unless otherwise specified, "multiple" means two or more.

[0042] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0043] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments.

[0044] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0045] Because the cybersecurity and informatization system is very important and developing rapidly, the academic community has carried out a lot of exploratory research work. For example, Academician Lu Jun made an in-depth explanation of the cybersecurity and informatization system from the perspectives of human social development and information system development, believing that the cybersecurity and informatization system is the basic form of human society, and demonstrated the rationality and inevitability of the birth of the cybersecurity and informatization system. Based on this, the development trend of the cybersecurity and informatization system has been studied, and a resilient cybersecurity and informatization system architecture has been proposed; the winning mechanisms such as structural agile adaptation, information value-added and agile collaboration of the cybersecurity and informatization system have been analyzed, and the operating mechanism of the cybersecurity and informatization system has been summarized from the perspectives of network center, information dominance, knowledge drive and system empowerment, etc. Although the research on the cybersecurity and informatization system is hot, there are relatively few achievements in the evaluation index system, and there are still problems of inefficiency and low quality in the generation of the evaluation index system in the cybersecurity and informatization field.

[0046] The decision network diagram originated from the combination of decision trees and concept maps. The decision tree method is usually used for risk decision-making. When the probability of each decision branch is known, the overall plan risk is calculated. The concept map is a way of organizing knowledge. It constructs a knowledge network similar to a graph by identifying and annotating the relationship between knowledge. The decision network diagram uses four types of graphic symbols, such as indicator decision points, category nodes, decision branch lines, and logical connection lines, to represent decision problems. The logical connection type is cross-designed from the two constraint dimensions of decision direction and satisfaction logic. The decision direction dimension is divided into one-way decision constraints and two-way decision constraints. The satisfaction logic dimension is further divided into "yes / no" selection result logic and "mandatory / expected" selection satisfaction logic. For example, Figure 1 shown.

[0047] In complex decision-making problems, when making a decision on an indicator decision point, it is necessary to consider its impact on other indicator decision points and even the entire decision structure, which is also the motivation for using decision network diagrams in indicator system design. Specifically, by using indicators as indicator decision points, multiple indicators forming category nodes, and the relationship between indicators as logical connecting lines, the indicator system construction problem is modeled as a solution decision problem.

[0048] The process of constructing the cybersecurity and informatization evaluation index system can be described as follows: under given evaluation criteria and target requirements, first, based on the existing statistical indicators in the large number of cybersecurity and informatization fields, clarify the indicator decision points and category nodes, sort out the logical correlation between the indicators, and draw the logical correlation lines between the nodes to form an initial cybersecurity and informatization evaluation indicator decision network diagram; on this basis, perform qualitative or quantitative evaluation and judgment on the indicator decision points in a certain order, and use the decision network diagram to carry out a round of correlation reasoning every time an indicator decision point result is given to reduce the complexity of the problem.

[0049] Examples section;

[0050] Reference Figures 2 to 3 One embodiment of the present invention provides a method for constructing a network security evaluation index system based on a decision network diagram, comprising the following steps:

[0051] Step S100: obtaining a plurality of network security evaluation indicators and a logical association relationship between every two network security evaluation indicators.

[0052] In step S100, the network security evaluation statistical indicator library is the data basis for constructing the indicator system. Multiple network security evaluation indicators are obtained from the network security evaluation statistical indicator library, and the logical correlation between each network security evaluation indicator is sorted out.

[0053] Step S200, generating an initial decision network diagram according to the network security evaluation indicators and the logical association relationship between their corresponding indicators; wherein the initial decision network diagram includes indicator decision points, category nodes and logical association lines, the indicator decision points are network security evaluation indicators, each category node includes a number of indicator decision points, and the logical association lines are used to characterize the logical association relationship between indicators between every two indicator decision points.

[0054] In this embodiment, according to the logical relationship, the indicator decision points are divided into three categories, and the decision complexity increases in sequence, as shown in Table 1. Among them, the first category of indicator decision points refers to the indicator decision points without logical relationship input, the second category of indicator decision points refers to the indicator decision points with only the logical relationship input determined by the source end and no logical relationship output, and the first category of indicator decision points includes all non-first category and non-second category indicator decision points, which usually refer to the indicator decision points with the logical relationship input that is not determined by the source end or the logical relationship input and output at the same time. The source end here refers to the output end of the corresponding logical relationship (that is, the source end (non-arrow end) of the logical relationship).

[0055]

[0056] Table 1

[0057] Step S300: Perform inference on the logical association relationship between indicators for each indicator decision point in the initial decision network diagram to obtain a final decision network diagram.

[0058] In terms of the processing order of indicator decision points, in order to give full play to the advantages of decision network diagram reasoning, the general idea of ​​"easy first, difficult later" is adopted, that is, according to the decision complexity of the indicator, usually the first type of indicator decision points with low decision complexity are processed first, and then the second type of indicator decision points with medium decision complexity are processed, and finally the expert integrated discussion mode is adopted to process the indicator decision points with high decision complexity (experts use the "contribution", "feasibility" and "accessibility" of the indicators as the basic basis for indicator processing, and make qualitative or quantitative evaluation and judgment, and give the decision results of each decision point). It should be noted that after each decision is processed for an indicator decision point and a decision result is obtained, a round of indicator decision network diagram reasoning needs to be carried out, that is, starting from the indicator decision point, logical reasoning is carried out on the relevant indicator decision points according to the logical connection line relationship, and the reasoning decision results of the relevant indicator decision points are tried to be given, so as to reduce the complexity of the indicator system construction as much as possible by reducing the scale of indicator decision points to be processed. These three types of indicator decision points are classified in combination with the decision network diagram tool and have certain specificity. The decision order of these three types of indicator decision points is a recommended decision-making method. The decision-making process is progressive according to the complexity of the decision, which is conducive to giving full play to the advantages of indicator reasoning. That is, processing one type of indicator decision points may be conducive to simplifying the second type of indicator decision points, and processing the second type of indicator decision points may also be conducive to simplifying the third type of indicator decision points.

[0059] It should be noted that the indicator decision point refers to the indicator that needs to make a decision (i.e., one item is determined from multiple options). Indicator decision network diagram reasoning refers to the process of simplifying the decision network diagram based on the logical relationship between indicators. Because some indicator nodes in the decision network diagram have been clarified (decision made), and some may not have made a decision. Through the indicator nodes that have made decisions and the logical relationship between them, the decision processing results of some indicator nodes that have not made a decision can be inferred, so the indicator node no longer needs to make a decision, which can reduce complexity.

[0060] This method introduces a decision network diagram tool to solve the problem of constructing a cybersecurity and informatization system evaluation index system. By taking indicators as indicator decision points, multiple indicators forming category nodes, and the relationship between indicators as logical connecting lines, an initial decision network diagram is generated, and the indicator system construction problem is modeled as a solution decision problem. Then, the logical correlation relationship between indicators is inferred for each indicator decision point in the initial decision network diagram to obtain the final decision network diagram, reducing the complexity of the decision problem. This method can effectively improve the efficiency and quality of the construction of a cybersecurity and informatization evaluation index system.

[0061] In order to facilitate those skilled in the art to understand the present technical solution, a group of optimal embodiments are provided below.

[0062] Taking the "network service quality assessment" in the cybersecurity and informatization system as an example, this paper conducts analysis using the method of constructing a cybersecurity and informatization assessment index system based on decision network diagrams.

[0063] It is assumed that the network service quality evaluation index library includes seven indicators, namely, the number of network nodes, network coverage, average number of node connections, average node online time, average data volume in the unit range, network node degree, and network node betweenness.

[0064] First, analyze the logical relationship between indicators:

[0065] (1) There is a conflicting relationship between the network node degree and the network node betweenness, that is, a forced bidirectional YN / NY relationship. Only one of the indicators can be selected. At the same time, the selection of the network node quantity indicator is a weak premise, that is, there is an expected unidirectional YY relationship between the network node degree, betweenness and network node quantity indicators.

[0066] (2) The premise for selecting the average data volume indicator within the unit range is that the network coverage indicator is selected, that is, there is a mandatory unidirectional YY relationship.

[0067] (3) The product of the average number of node connections and the average time a node is online can effectively represent network activity, but a single indicator still has evaluation value, that is, there is an expected bidirectional YY / NN relationship between the two.

[0068] Based on the logical relationship between the above indicators, draw a decision network diagram of the network service quality indicator system, such as Figure 4 shown.

[0069] In the process of constructing a specific indicator system, priority is given to the decision point of one type of indicator, "total network scale". Through expert decision-making, the indicator of the number of network nodes to be retained is determined, and then the indicator decision network graph reasoning is carried out (combined with the experience of experts in the field of network security, the indicator decision points are qualitatively or quantitatively evaluated and judged in a certain order. After the decision results are given, a round of correlation relationship reasoning process is carried out using the decision network graph to reduce the complexity of the problem), and the network coverage indicator and the unit range average data volume indicator are eliminated.

[0070] Then, the decision point of the second category of indicators is "network activity". At this time, experts can directly determine that the two indicators need to be selected at the same time based on the expected two-way YY / NN relationship between the average number of node connections and the average node online time.

[0071] Finally, the decision point of the three types of indicators with more complex decisions is "node importance". Because both network node degree and network node betweenness can represent node importance to a certain extent, it is necessary to make a decision through expert discussion. Here, it is assumed that the expert collective finally chooses the network node betweenness indicator. It can be inferred through reasoning that the network node degree indicator is not selected.

[0072] In summary, the final decision results of the network service quality index system are 4 indicators, namely, the number of network nodes, the average number of node connections, the average node online time, and the network node betweenness. Compared with the indicator decision-making based only on experts, the number of expert decisions in this method is reduced from 7 times to 2 times, which greatly improves the efficiency of indicator system construction. At the same time, due to the clear logical relationship between indicators, it is more conducive to experts to make decisions to form a high-quality indicator system. It is worth noting that the decision result of the decision point is the final option determined by the indicator among multiple options. Therefore, in this embodiment, indicator reasoning is actually carried out after each expert decision.

[0073] This method introduces a decision network diagram tool to solve the problem of constructing a cybersecurity and informatization system evaluation index system. By taking indicators as indicator decision points, multiple indicators forming category nodes, and the relationship between indicators as logical connecting lines, an initial decision network diagram is generated, and the indicator system construction problem is modeled as a solution decision problem. Then, the logical correlation relationship between indicators is inferred for each indicator decision point in the initial decision network diagram to obtain the final decision network diagram, reducing the complexity of the decision problem. This method can effectively improve the efficiency and quality of the construction of a cybersecurity and informatization evaluation index system.

[0074] Reference Figure 5 One embodiment of the present invention provides a network information evaluation index system construction system based on a decision network diagram, including a data acquisition module 100, a decision network diagram generation module 200 and a decision network diagram reasoning module 300, wherein:

[0075] The data acquisition module 100 is used to acquire multiple network security evaluation indicators and the logical association relationship between every two network security evaluation indicators.

[0076] The decision network diagram generation module 200 is used to generate an initial decision network diagram based on the network security evaluation indicators and the logical association relationship between their corresponding indicators; wherein the initial decision network diagram includes indicator decision points, category nodes and logical association lines, the indicator decision points are network security evaluation indicators, each category node includes a number of indicator decision points, and the logical association lines are used to characterize the logical association relationship between indicators between every two indicator decision points.

[0077] The decision network diagram reasoning module 300 is used to reason about the logical association relationship between indicators for each indicator decision point in the initial decision network diagram to obtain the final decision network diagram.

[0078] This system introduces a decision network diagram tool to solve the problem of constructing a cybersecurity and informatization system evaluation index system. By taking indicators as indicator decision points, multiple indicators constitute category nodes, and the relationship between indicators as logical connecting lines, an initial decision network diagram is generated, and the indicator system construction problem is modeled as a solution decision problem; then, each indicator decision point in the initial decision network diagram is inferred from the logical correlation relationship between indicators to obtain the final decision network diagram, reducing the complexity of the decision problem. This system can effectively improve the efficiency and quality of the construction of the cybersecurity and informatization evaluation index system.

[0079] It should be noted that the present system embodiment and the above method embodiment are based on the same inventive concept, so the relevant contents of the above method embodiment are also applicable to the present system embodiment, and therefore, they will not be described in detail here.

[0080] An embodiment of the present invention provides an electronic device. The electronic device may be any type of intelligent terminal, such as a mobile phone, a tablet computer, a personal computer, etc. Specifically, the electronic device includes: one or more control processors and a memory. This example takes a control processor as an example. The control processor and the memory may be connected via a bus or other means. This example takes the connection via a bus as an example.

[0081] As a non-transitory computer-readable storage medium, the memory can be used to store non-transitory software programs, non-transitory computer executable programs and modules. The control processor implements the method for constructing a network information evaluation index system based on a decision network diagram in the above method embodiment by running the non-transitory software programs, instructions and modules stored in the memory. The memory may include a program storage area and a data storage area, wherein the program storage area may store an operating system and application programs required for at least one function; in addition, the memory may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one disk storage device, a flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory may optionally include a memory remotely arranged relative to the control processor, and these remote memories may be connected to the electronic device via a network. Examples of the above network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network and a combination thereof. The one or more modules are stored in the memory, and when executed by the one or more control processors, the method for constructing a network information evaluation index system based on a decision network diagram in the above method embodiment is executed. For example, the execution of the above description Figure 2 Method steps S100 to S300 in.

[0082] The embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are executed by one or more control processors, for example, so that the one or more control processors can execute the method for constructing a network security evaluation index system based on a decision network diagram in the above method embodiment. Figure 2 Method steps S100 to S300 in.

[0083] Through the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a general hardware platform. Those skilled in the art can understand that all or part of the processes in the above embodiment method can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and the program can include the process of the embodiment of the above method when executed. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

[0084] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "illustrative embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0085] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.

Claims

1. A method for constructing a network information evaluation index system based on a decision network diagram, characterized in that: The steps include: Obtaining a plurality of network security evaluation indicators and a logical correlation relationship between each two of the network security evaluation indicators; Generate an initial decision network diagram according to the network security evaluation indicators and the corresponding logical association relationship between the indicators; wherein the initial decision network diagram includes indicator decision points, category nodes and logical association lines, the indicator decision points are the network security evaluation indicators, each category node includes a number of the indicator decision points, and the logical association line is used to characterize the logical association relationship between the indicators between every two indicator decision points; Performing inference on the logical association relationship between indicators for each indicator decision point in the initial decision network diagram to obtain a final decision network diagram; The category nodes include one type of indicator decision points, two types of indicator decision points and three types of indicator decision points, wherein the one type of indicator decision points include the indicator decision points without logical relationship input, the two types of indicator decision points include the indicator decision points with logical relationship input determined by the source and without logical relationship output, and the three types of indicator decision points include the indicator decision points with logical relationship input not determined by the source or with both logical relationship input and output; according to the decision complexity of the indicator, the logical association relationship between indicators is inferred for each of the one type of indicator decision points, the two type of indicator decision points and the three type of indicator decision points in turn.

2. The method for constructing a network information evaluation index system based on a decision network diagram according to claim 1 is characterized in that: The inference of the logical association relationship between indicators is performed on each indicator decision point in the initial decision network diagram to obtain the final decision network diagram, including: Reasoning about the decision points of the above-mentioned indicator class: When there is a current first indicator decision point that has not been processed in the type of indicator decision points, decision processing is performed on the current first indicator decision point, and logical reasoning is performed on the corresponding indicator decision points that have a logical relationship with the current first indicator decision point according to the logical association line to obtain a first reasoning decision result, and the initial decision network diagram is updated according to the first reasoning decision result; After the reasoning of the first type of indicator decision points is completed, the second type of indicator decision points are reasoned: When there is a current second indicator decision point that has not been processed in the two types of indicator decision points, the current second indicator decision point is processed, and logical reasoning is performed on the corresponding indicator decision points that have a logical relationship with the current second indicator decision point according to the logical association line to obtain a second reasoning decision result, and the initial decision network diagram is updated according to the second reasoning decision result; After the reasoning of the two-category indicator decision point is completed, the three-category indicator decision point is reasoned: When there is a current third indicator decision point that has not been processed among the three types of indicator decision points, decision processing is performed on the current third indicator decision point, and logical reasoning is performed on the corresponding indicator decision points that have a logical relationship with the current third indicator decision point according to the logical association line to obtain a third reasoning decision result, and the initial decision network diagram is updated according to the third reasoning decision result; After the reasoning of the three types of indicator decision points is completed, the final decision network diagram is obtained.

3. The method for constructing a network information evaluation index system based on a decision network diagram according to claim 2 is characterized in that: Decisions are made on the current first indicator decision point, the current second indicator decision point or the current third indicator decision point respectively through expert experience.

4. The method for constructing a network information evaluation index system based on a decision network diagram according to any one of claims 1 to 3, characterized in that: The logical correlation between each two of the cybersecurity and informatization evaluation indicators is selected from the cybersecurity and informatization evaluation statistical indicator library.

5. A network information evaluation index system construction system based on a decision network diagram, characterized in that: include: A data acquisition module, used to acquire a plurality of network security evaluation indicators and a logical association relationship between each two network security evaluation indicators; A decision network diagram generation module, used to generate an initial decision network diagram according to the network security evaluation indicators and the corresponding logical association relationship between the indicators; wherein the initial decision network diagram includes indicator decision points, category nodes and logical association lines, the indicator decision points are the network security evaluation indicators, each category node includes a number of indicator decision points, and the logical association line is used to characterize the logical association relationship between indicators between every two indicator decision points; A decision network diagram reasoning module is used to reason about the logical association relationship between indicators for each indicator decision point in the initial decision network diagram to obtain a final decision network diagram; The category nodes include one type of indicator decision points, two types of indicator decision points and three types of indicator decision points, wherein the one type of indicator decision points include the indicator decision points without logical relationship input, the two types of indicator decision points include the indicator decision points with logical relationship input determined by the source and without logical relationship output, and the three types of indicator decision points include the indicator decision points with logical relationship input not determined by the source or with both logical relationship input and output; according to the decision complexity of the indicator, the logical association relationship between indicators is inferred for each of the one type of indicator decision points, the two type of indicator decision points and the three type of indicator decision points in turn.

6. An electronic device, characterized in that: It includes at least one control processor and a memory for communicating with the at least one control processor; the memory stores instructions that can be executed by the at least one control processor, and the instructions are executed by the at least one control processor so that the at least one control processor can execute the method for constructing a network security evaluation indicator system based on a decision network diagram as described in any one of claims 1 to 4.

7. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the method for constructing a network security evaluation index system based on a decision network diagram as described in any one of claims 1 to 4.

Images