An information system risk assessment method, system, terminal device and storage medium

Abstract

The application relates to the technical field of information security, in particular to an information system risk assessment method and system, a terminal device and a storage medium. The method comprises the following steps: if the risk information categories are multiple, determining whether the risk information categories are in the same information security management level; if the risk information categories are in the same information security management level, obtaining and combining a first-level association logic between the risk information categories and a security risk value corresponding to the risk information categories to generate a risk assessment report corresponding to an information system; and if the risk information categories are not in the same information security management level, obtaining a second-level association logic corresponding to the risk information categories and combining a security risk value corresponding to the risk information categories to generate a risk assessment report corresponding to the information system. The information system risk assessment method and system, the terminal device and the storage medium provided by the application can comprehensively improve the accuracy of information system risk assessment.

Description

Technical Field

[0001] This application relates to the field of information security technology, and in particular to an information system risk assessment method, system, terminal device and storage medium. Background Technology

[0002] An information system is a human-machine integrated system consisting of computer hardware, network and communication equipment, computer software, information resources, information users, and certain protocols and regulations, with the purpose of processing information flow.

[0003] Information systems have five basic functions: information input, storage, output, and control. The role of information systems differs from other systems in that they do not perform specific practical tasks but rather are related to overall coordination and consistency. Therefore, the larger the organization, the greater the economic benefits of improving the information system, and the operation of the information system is closely related to the efficiency of the entire organization.

[0004] Currently, most risk assessment methods for information systems involve conducting overall risk assessments for specific information environments. These overall risk assessments are derived by superimposing individual risk assessments of various information objects or elements or by statistically analyzing their proportions. Consequently, they lack analysis of the interrelationships between various information objects or elements, resulting in a somewhat one-sided and inaccurate overall risk assessment, which is therefore not representative. Summary of the Invention

[0005] To comprehensively improve the accuracy of information system risk assessment, this application provides an information system risk assessment method, system, terminal equipment, and storage medium.

[0006] In a first aspect, this application provides an information system risk assessment method, system, terminal device, and storage medium, comprising the following steps: Obtain the information management module corresponding to the information system; The information management module is analyzed to obtain the corresponding target information category; If there are multiple target information categories, then determine whether the security risk value corresponding to the target information category is within a preset risk threshold. If the security risk value corresponding to the target information category is within the preset risk threshold, then the corresponding risk information category is obtained; If there are multiple risk information categories, then determine whether the risk information categories are at the same information security management level; If the risk information categories are at the same information security management level, then the primary association logic between the risk information categories and the security risk value corresponding to the risk information category are obtained and combined to generate a risk assessment report for the information system. If the risk information category is not at the same information security management level, then the secondary association logic corresponding to the risk information category is obtained, and combined with the security risk value corresponding to the risk information category, a risk assessment report corresponding to the information system is generated.

[0007] By adopting the above technical solution, it is determined whether the security risk value corresponding to the target information category is at a preset risk threshold. If it is, it indicates that the information management module to which the target information category belongs has already encountered information security risks. Further, the specific risk information category corresponding to the target information category is obtained. If there are multiple risk information categories, in order to analyze the information correlation attributes between multiple risk information categories, it is determined whether the risk information categories are at the same information security management level. If the risk information categories are at the same information security management level, it indicates that the multiple risk information categories are currently in the same type of information system, i.e., the same information category management system. Further, the first-level correlation logic between risk information categories in the same information system and the security risk value corresponding to the risk information category are obtained, and a risk assessment report corresponding to the information system is generated. If the risk information categories are not at the same information security management level, i.e., different information category management systems, it indicates that the multiple risk information categories are currently in different types of information systems. Then, the second-level correlation logic corresponding to the risk information categories in different information systems is obtained and combined with the security risk value corresponding to the risk information category, and a risk assessment report corresponding to the information system is generated. By combining the specific category of information and the information correlation between the corresponding management systems, the risk of the information system is comprehensively assessed, thereby improving the accuracy of the information system risk assessment.

[0008] Optionally, before determining that the security risk value corresponding to the target information category is at a preset risk threshold if there are multiple target information categories, the following steps are further included: The confidentiality, integrity, and availability of the target information categories are acquired and scored to generate corresponding information risk estimates. The operation and maintenance level and security level of the information management module corresponding to the target information category are obtained and scored to generate a corresponding management risk estimate. By combining the information risk estimate and the management risk estimate, the security risk value corresponding to the target information category is generated.

[0009] By adopting the above technical solution, and combining the estimated information risk corresponding to the target information category with the estimated management risk of the information management module corresponding to the target information category for comprehensive analysis and evaluation, the accuracy of information system risk assessment is improved.

[0010] Optionally, if the risk information categories are at the same information security management level, then obtaining and combining the primary correlation logic between the risk information categories and the security risk value corresponding to the risk information category to generate a risk assessment report for the information system includes the following steps: If the risk information categories are at the same information security management level, then according to the primary association logic between the risk information categories, additional risk values ​​corresponding to each risk information category are generated; By combining the additional risk value and the security risk value, a risk assessment report corresponding to the information system is generated.

[0011] By adopting the above technical solution, corresponding additional risk values ​​are generated based on the primary correlation logic between risk information categories. These additional risk values ​​can more intuitively display the degree of risk correlation between risk information categories, thereby improving the accuracy of information system risk assessment.

[0012] Optionally, after generating the additional risk value corresponding to each risk information category according to the first-level association logic between the risk information categories if the risk information categories are at the same information security management level, the method further includes the following steps: Based on the additional risk value, obtain the associated risk information items corresponding to the risk information categories; Identify the risk guidance information source and risk triggering information source corresponding to the associated risk information items; By combining the risk guidance information source and the risk inducement information source, a risk distribution diagram corresponding to the risk information category is generated.

[0013] By adopting the above technical solution, the risk distribution diagram generated based on the risk guidance information source and risk inducement information source corresponding to the associated risk information item can more intuitively show the distribution of relevant risk hazards in the information system, thereby improving the accuracy of information system risk assessment.

[0014] Optionally, if the risk information categories are not at the same information security management level, obtaining the secondary association logic corresponding to the risk information category and combining it with the security risk value corresponding to the risk information category to generate a risk assessment report for the information system includes the following steps: If the risk information category is not in the same information security management level, then obtain the target information security management level corresponding to the risk information category; Determine the first information security management level and the second information security management level in the target information security management level, wherein the security management level of the first information security management level is higher than the security management level of the second information security management level; Based on the secondary association logic, the first risk radiation range corresponding to the risk information category at the first information security management level and the second risk radiation range corresponding to the risk information category at the first information security management level are obtained. Obtain the security risk value corresponding to the risk information category as the target security risk value; By combining the target security risk value, the first risk radiation range, and the second risk radiation range, a risk assessment report corresponding to the information system is generated.

[0015] By adopting the above technical solution, based on the first risk radiation range and the second risk radiation range, the degree of risk correlation between the first information security management level and the second information security management level can be specifically determined. Combined with the security risk value of the risk information category itself, a risk assessment report corresponding to the information system is generated. Thus, the risk assessment report can more comprehensively demonstrate the information risk correlation between various target information security management levels in the information system, thereby improving the accuracy of information system risk assessment.

[0016] Optionally, generating the risk assessment report corresponding to the information system by combining the target security risk value, the first risk radiation range, and the second risk radiation range includes the following steps: Obtain the risk information items corresponding to the first risk radiation range and the second risk radiation range; Identify the risk information items and obtain their corresponding information importance levels; Based on the information importance level and the security risk value, a risk assessment report corresponding to the information system is generated.

[0017] By adopting the above technical solution, the actual information importance level corresponding to each risk information item is further identified and determined, and a risk assessment report corresponding to the information system is generated by combining the security risk value corresponding to the risk information item. This can more intuitively reflect the risk status of the risk information item corresponding to each information importance level.

[0018] Optionally, after identifying the risk information item and obtaining the corresponding information importance level, the method further includes the following steps: Determine whether the importance level of the information meets the preset emergency handling level standard; If the importance level of the information meets the preset emergency handling level standard, then the risk response priority of the risk information item is set according to the importance level of the information, and the importance level of the information is proportional to the risk emergency priority. Based on the risk response priority, output the risk response strategy corresponding to the risk information item.

[0019] By adopting the above technical solution, risk response strategies corresponding to target risk information items are output according to risk response priorities, thereby enabling timely risk elimination of important information and maximizing the security of important information.

[0020] Secondly, this application provides an information system risk assessment system, comprising: The first acquisition module is used to acquire the information management module corresponding to the information system. The parsing module is used to parse the information management module and obtain the corresponding target information category; The first judgment module, if there are multiple target information categories, is used to determine whether the security risk value corresponding to the target information category is within a preset risk threshold. If the security risk value corresponding to the target information category is at the preset risk threshold, the second acquisition module is used to acquire the corresponding risk information category. The second judgment module, if there are multiple risk information categories, is used to determine whether the risk information categories are at the same information security management level; If the risk information categories are at the same information security management level, the first generation module is used to obtain and combine the primary association logic between the risk information categories and the security risk value corresponding to the risk information category to generate a risk assessment report corresponding to the information system. If the risk information category is not at the same information security management level, the second generation module is used to obtain the secondary association logic corresponding to the risk information category, and combine it with the security risk value corresponding to the risk information category to generate a risk assessment report corresponding to the information system.

[0021] By adopting the above technical solution, the first judgment module determines whether the security risk value corresponding to the target information category is at a preset risk threshold. If it is, it indicates that the information management module to which the target information category belongs has already encountered an information security risk. The second acquisition module then obtains the specific risk information category corresponding to the target information category. If there are multiple risk information categories, in order to analyze the information association attributes between them, the second judgment module determines whether the risk information categories are at the same information security management level. If they are at the same level, it indicates that the multiple risk information categories are in the same type of information system, i.e., the same information category management system. Further acquisition and combination with the same... The system establishes a primary association logic between risk information categories and corresponding security risk values ​​for each risk information category. A first generation module generates a risk assessment report for the information system. If risk information categories are not at the same information security management level (i.e., different information category management systems), it indicates that multiple risk information categories are not in the same type of information system. In this case, the secondary association logic corresponding to the risk information categories in different information systems is obtained, combined with the corresponding security risk values. A second generation module then generates a risk assessment report for the information system. By combining the specific categories of information with the information correlations between corresponding management systems, a comprehensive assessment of the information system's risks is conducted, thereby improving the accuracy of the information system risk assessment.

[0022] Thirdly, this application provides a terminal device, which adopts the following technical solution: A terminal device includes a memory and a processor. The memory stores computer instructions that can be executed on the processor. When the processor loads and executes the computer instructions, it employs the aforementioned information system risk assessment method.

[0023] By adopting the above technical solution, computer instructions are generated by the above-mentioned information system risk assessment method and stored in the memory for loading and execution by the processor. Thus, terminal devices are made based on the memory and processor for convenient use.

[0024] Fourthly, this application provides a computer-readable storage medium, which adopts the following technical solution: A computer-readable storage medium storing computer instructions, wherein when the computer instructions are loaded and executed by a processor, the aforementioned information system risk assessment method is employed.

[0025] By adopting the above technical solution, the above-mentioned information system risk assessment method generates computer instructions and stores them in a computer-readable storage medium for loading and execution by a processor. The computer-readable storage medium facilitates the reading and storage of computer instructions.

[0026] In summary, this application includes at least one of the following beneficial technical effects: It determines whether the security risk value corresponding to the target information category is at a preset risk threshold. If it is, it indicates that the information management module to which the target information category belongs has already experienced information security risks. Further, it obtains the specific risk information category corresponding to the target information category. If there are multiple risk information categories, in order to analyze the information association attributes between multiple risk information categories, it determines whether the risk information categories are at the same information security management level. If the risk information categories are at the same information security management level, it indicates that the multiple risk information categories are currently in the same type of information system, i.e., the same information category management system. Further, it obtains and combines the first-level association logic between risk information categories in the same information system and the security risk value corresponding to the risk information category to generate a risk assessment report for the information system. If the risk information categories are not at the same information security management level, i.e., different information category management systems, it indicates that the multiple risk information categories are not in the same type of information system. Then, it obtains the second-level association logic corresponding to the risk information categories in different information systems and combines it with the security risk value corresponding to the risk information category to generate a risk assessment report for the information system. By combining the specific category of information and the information association between the corresponding management systems, a comprehensive assessment of the information system's risks is conducted, thereby improving the accuracy of the information system risk assessment. Attached Figure Description

[0027] Figure 1 This is a flowchart illustrating steps S101 to S107 of an information system risk assessment method according to this application.

[0028] Figure 2 This is a flowchart illustrating steps S201 to S203 of an information system risk assessment method according to this application.

[0029] Figure 3 This is a flowchart illustrating steps S301 to S302 in an information system risk assessment method according to this application.

[0030] Figure 4 This is a flowchart illustrating steps S401 to S403 of an information system risk assessment method according to this application.

[0031] Figure 5 This is a flowchart illustrating steps S501 to S505 of an information system risk assessment method according to this application.

[0032] Figure 6 This is a flowchart illustrating steps S601 to S603 of an information system risk assessment method according to this application.

[0033] Figure 7 This is a flowchart illustrating steps S701 to S703 of an information system risk assessment method according to this application.

[0034] Figure 8 This is a schematic diagram of the modules of an information system risk assessment system according to this application.

[0035] Explanation of reference numerals in the attached figures: 1. First acquisition module; 2. Parsing module; 3. First judgment module; 4. Second acquisition module; 5. Second judgment module; 6. First generation module; 7. Second generation module. Detailed Implementation

[0036] The following is in conjunction with the appendix Figure 1-8 This application will be described in further detail.

[0037] This application discloses an information system risk assessment method, such as... Figure 1 As shown, it includes the following steps: S101. Obtain the information management module corresponding to the information system; S102. Parse the information management module to obtain the corresponding target information category; S103. If there are multiple target information categories, determine whether the security risk value corresponding to the target information category is within the preset risk threshold. S104. If the security risk value corresponding to the target information category is at a preset risk threshold, then obtain the corresponding risk information category; S105. If there are multiple risk information categories, determine whether the risk information categories are at the same information security management level; S106. If the risk information categories are at the same information security management level, then obtain and combine the primary association logic between the risk information categories and the security risk value corresponding to the risk information category to generate a risk assessment report for the information system. S107. If the risk information categories are not at the same information security management level, then obtain the secondary association logic corresponding to the risk information category, and generate a risk assessment report for the information system in combination with the security risk value corresponding to the risk information category.

[0038] In step S101, the information system refers to the primary category of information management, and the information management module is the secondary category of information management. For example, Payment Software A includes a public service information system, a funds processing information system, and a customer management information system. The public service information system includes a login and identity information management module and a transaction information management module. The funds processing information system includes a payment clearing information management module, a financial accounting information management module, and an accounting center information management module. The customer management information system includes a member information management module, a merchant information management module, a product account information management module, and a credit information management module.

[0039] The target information category in step S102 refers to the application information managed by the information management module. For example, the target information category managed by the login and identity information management module includes the user's login account and password, as well as related authentication information.

[0040] In step S103, if there are multiple target information categories, in order to strengthen the analysis of information system-related risks, risk assessment can be performed on each current target information category, that is, to determine whether the security risk value corresponding to the target information category is within the preset risk threshold. The security risk value refers to the score assessed based on the risks that the current target information category may suffer, and the preset risk threshold refers to the score range corresponding to the target information category being in a risk state.

[0041] For example, if the target information category is a user's login account password, and its corresponding preset risk threshold is 5 to 10 points, then after the system evaluates the user's password, it will be determined that there is a risk of password brute-force attack, that is, the weak password set by the user is easily cracked by criminals. The corresponding security risk value is 6 points, and it can be determined that the security risk value of the password information is at its corresponding preset risk threshold.

[0042] For example, if the system evaluates a user's password and determines that there is a risk of illegal character input, meaning that a hacker could attack the system by uploading code or illegal characters to the user's name or other field during registration, the corresponding security risk score would be 4 points. This would indicate that the security risk value of the password information is not at its corresponding preset risk threshold.

[0043] For example, if the target information category is single, it directly determines whether the security risk value corresponding to the target information category is within the preset risk threshold. If it is, the corresponding information risk warning is generated directly. If it is not, the security risk value of the target information category is evaluated in real time.

[0044] In step S104, if the security risk value corresponding to the target information category is at a preset risk threshold, then in order to better distinguish the type of risk information, the target information categories at the preset risk threshold are all classified as risk information categories. If the security risk value corresponding to the target information category is not at the preset risk threshold, then real-time risk assessment of the security risk value of the target information category continues.

[0045] In step S105, if there are multiple risk information categories, it indicates that there are multiple information risk vulnerabilities in the current information system. In order to further analyze the risk correlation between risk information categories, it is determined whether the risk information categories are at the same information security management level. Risk correlation refers to the associated risk impact between different risk information categories. Information security management level refers to the security management level divided according to the security protection level predefined for information.

[0046] For example, if the risk information categories are merchant billing information and merchant payment information, since both merchant billing information and merchant payment information are pre-defined as merchant transaction information and belong to the same security protection level, it can be determined that merchant billing information and merchant payment information belong to the same information security management level.

[0047] For example, if the risk information categories are merchant billing information and merchant registration identity information, since it is pre-defined that merchant billing information is the merchant's transaction information and merchant registration identity information is the merchant's identity verification information, and the security protection level of merchant registration identity information is higher than that of merchant billing information, it can be determined that merchant billing information and merchant registration identity information do not belong to the same information security management level.

[0048] In step S106, if the risk information categories are at the same information security management level, it means that the current multiple risk information categories belong to the same information security management level for management. On the other hand, it also means that the information corresponding to the current multiple risk information categories is of equal importance. In order to analyze each individual risk information category, the first-level association logic between the current multiple risk information categories is further obtained. The first-level association logic refers to the risk association relationship between risk information categories within the same information security management level.

[0049] For example, the risk information categories are merchant billing information and merchant payment information. Both belong to the same information security management level. The first-level association logic between merchant billing information and merchant payment information refers to the risk impact on each other when either merchant billing information or merchant payment information is at risk.

[0050] For example, when there is a risk of leakage of merchant billing information, the merchant billing information records each payment record of the merchant and the corresponding payment method. In some cases, the merchant's payment information is also considered personal privacy. Therefore, when there is a risk of leakage of merchant billing information, some of the merchant's payment information is disclosed to a certain extent. On the other hand, when there is a risk of leakage of merchant payment information, the merchant payment information records the amount of each payment made by the merchant. Through the amount of each payment, the corresponding billing information can also be summarized. Therefore, when there is a risk of leakage of merchant payment information, some of the merchant's billing information is also disclosed to a certain extent.

[0051] Furthermore, by combining the security risk values ​​corresponding to the merchant's billing information, a risk assessment report is generated for the information system. This risk assessment report can not only display the security risk values ​​corresponding to the current merchant's billing information to the user, but also prompt the user in text or voice form about the risk relationship between the merchant's billing information and the merchant's payment information.

[0052] In step S107, if the risk information categories are not at the same information security management level, it means that the current multiple risk information categories are not managed by the same information security management level. On the other hand, it also means that the information importance corresponding to the current multiple risk information categories is not equal. In order to analyze the risk information categories with different information importance one by one, the secondary association logic corresponding to the current risk information category is obtained. The secondary association logic refers to the risk association relationship between risk information categories at different information security management levels.

[0053] For example, the risk information categories are merchant billing information and merchant transaction record information. Since merchant billing information belongs to the merchant's transaction information and merchant transaction record information belongs to the merchant's personal consumption privacy information, it can be determined that merchant billing information and merchant transaction record information are not at the same information security management level. Moreover, the information security management level of merchant transaction record information is higher than that of merchant billing information. In other words, the security protection level and importance of merchant transaction record information are higher than those of merchant billing information.

[0054] For example, when only merchant billing information is at risk of being leaked, this information records each transaction and the corresponding category of the transaction. This information allows us to infer and summarize the merchant's daily spending habits and frequently consumed items. Therefore, when merchant billing information is at risk of being leaked, it discloses, to some extent, the merchant's transaction category records. Furthermore, by combining this information with the security risk value corresponding to the merchant billing information, a risk assessment report is generated for the information system. This report not only displays the security risk value corresponding to the current merchant billing information to the user but also provides text or voice prompts to the user regarding the risk relationship between the merchant billing information and the merchant's payment information.

[0055] The information system risk assessment method provided in this embodiment determines whether the security risk value corresponding to the target information category is at a preset risk threshold. If it is, it indicates that the information management module to which the target information category belongs has already encountered information security risks. Further, it obtains the specific risk information category corresponding to the target information category. If there are multiple risk information categories, in order to analyze the information association attributes between multiple risk information categories, it determines whether the risk information categories are at the same information security management level. If the risk information categories are at the same information security management level, it indicates that the multiple risk information categories are currently in the same type of information system, i.e., the same information category management system. It further obtains and combines the first-level association logic between risk information categories in the same information system and the security risk value corresponding to the risk information category to generate a risk assessment report for the information system. If the risk information categories are not at the same information security management level, i.e., different information category management systems, it indicates that the multiple risk information categories are currently in different types of information systems. It then obtains the second-level association logic corresponding to the risk information categories in different information systems and combines it with the security risk value corresponding to the risk information category to generate a risk assessment report for the information system. By combining the specific category of information and the information association between the corresponding management systems, the risk of the information system is comprehensively assessed, thereby improving the accuracy of the information system risk assessment.

[0056] In one embodiment of this application, such as Figure 2 As shown, before step S103, which determines whether the security risk value corresponding to a target information category is within a preset risk threshold if there are multiple target information categories, the following steps are also included: S201. Obtain and score the confidentiality, integrity and availability of the target information category, and generate the corresponding information risk estimate; S202. Obtain and score the operation and maintenance level and security level of the information management module corresponding to the target information category, and generate the corresponding management risk estimate; S203. Combine the information risk estimate and the management risk estimate to generate the security risk value corresponding to the target information category.

[0057] In step S201, confidentiality refers to information protected by confidentiality technologies, such as information encryption, segmentation, and hiding. Integrity refers to the characteristics of information that remain undamaged, unmodified, unlost, and unalterable without authorization during transmission, exchange, storage, and processing; it is also the most basic security feature. Availability refers to the characteristic that information resources can be accessed and used normally by authorized entities as required, or can be restored to use under abnormal circumstances. The target information category is evaluated based on the above scoring indicators to generate a corresponding information risk estimate. The information risk estimate tends to indicate the risk impact generated by the target information category itself; for example, the target information category may contain illegal character input.

[0058] In step S202, the operation and maintenance level refers to the operation and maintenance level of the information management module based on the importance of the target information category. The higher the importance of the target information category, the higher the operation and maintenance level of the corresponding information management module. The security level refers to the protection capability level of the information management module against risks related to the target information category. The information management module is then evaluated using both of these scoring indicators to obtain a corresponding management risk estimate. The management risk estimate tends to indicate the risk impact of abnormal vulnerabilities in the information management module on the target information category.

[0059] In step S203, the security risk value corresponding to the target information category is generated by combining the information risk estimate and the management risk estimate obtained from the above evaluation. The security risk value is obtained by superimposing the information risk estimate and the management risk estimate.

[0060] The information system risk assessment method provided in this embodiment combines the estimated information risk value corresponding to the target information category with the estimated management risk value of the information management module corresponding to the target information category for comprehensive analysis and assessment, thereby improving the accuracy of information system risk assessment.

[0061] In one embodiment of this example, such as Figure 3 As shown, step S106, which involves obtaining and combining the primary association logic between risk information categories and the security risk value corresponding to each risk information category to generate a risk assessment report for the information system, includes the following steps: S301. If risk information categories are at the same information security management level, then generate additional risk values ​​for each risk information category according to the primary association logic between risk information categories; S302. Combine the additional risk value and the security risk value to generate a risk assessment report for the information system.

[0062] In step S301, the additional risk value refers to the risk assessment score generated based on the primary association logic. For example, the risk information categories are merchant billing information and merchant payment information, both of which belong to the same information security management level. The primary association logic corresponding to merchant billing information and merchant payment information refers to the risk impact on each other when a risk occurs in merchant billing information or merchant payment information. The risk impact generated by each of the above risk information categories is further assessed to generate the corresponding additional risk value.

[0063] In step S302, by combining the additional risk value and the security risk value corresponding to the risk information category obtained above, a risk assessment report corresponding to the information system is generated. Through this risk assessment report, the degree of risk of each risk information category can be obtained. The degree of risk can be obtained through the analysis of the security risk value. It can also be obtained that the degree of risk impact of each risk information category on other risk information categories can be obtained through the analysis of the additional risk value.

[0064] The information system risk assessment method provided in this embodiment generates corresponding additional risk values ​​based on the primary correlation logic between risk information categories. Thus, the additional risk values ​​can more intuitively display the degree of risk correlation between risk information categories, thereby improving the accuracy of information system risk assessment.

[0065] In one embodiment of this example, such as Figure 4 As shown, step S301, which involves generating additional risk values ​​for each risk information category based on the primary association logic between risk information categories, includes the following steps: If the risk information categories are at the same information security management level, then... S401. Based on the additional risk value, obtain the associated risk information items corresponding to the risk information categories; S402. Identify the risk guidance information source and risk triggering information source corresponding to the associated risk information items; S403. Combine risk-guiding information sources and risk-inducing information sources to generate a risk distribution diagram corresponding to risk information categories.

[0066] The associated risk information item in step S401 refers to the risk information category that has a risk association effect. For example, the risk information category is merchant billing information and merchant payment information, where merchant billing information and merchant payment information are associated risk information items of each other.

[0067] In step S402, the risk-initiating information source refers to the category of risk information that causes the risk, while the risk-inducing information source refers to the category of risk information affected by the risk-initiating information source. For example, when analyzing merchant billing information alone, the merchant billing information may disclose some merchant payment information, thereby posing a risk of leakage of merchant payment information. In this case, the merchant billing information is the risk-initiating information source, and the merchant payment information is the risk-inducing information source.

[0068] In step S403, by performing the above analysis on each type of risk information separately, the corresponding risk guidance information source and risk inducement information source are determined, and a risk distribution diagram corresponding to the risk information category is generated. This risk distribution diagram can show the risk impact of each type of risk information on other types of risk information.

[0069] For example, the risk distribution diagram illustrates the risk distribution information of merchant billing information and merchant payment information: when merchant billing information is the source of risk guidance information, and some of the merchant's payment information is disclosed, the corresponding source of risk inducing information is the merchant payment information; when merchant billing information is the source of risk guidance information, and some of the merchant's billing information is disclosed, the corresponding source of risk inducing information is the merchant billing information.

[0070] The information system risk assessment method provided in this embodiment can more intuitively show the distribution of relevant risks and hidden dangers in the information system based on the risk distribution diagram generated by the risk guidance information source and risk inducement information source corresponding to the associated risk information item, thereby improving the accuracy of information system risk assessment.

[0071] In one embodiment of this example, such as Figure 5 As shown, step S107, which involves obtaining the secondary association logic corresponding to the risk information category if the risk information categories are not at the same information security management level, and generating a risk assessment report for the information system based on the security risk value corresponding to the risk information category, includes the following steps: S501. If the risk information categories are not at the same information security management level, then obtain the target information security management level corresponding to the risk information category; S502. Determine the first information security management level and the second information security management level in the target information security management level, wherein the security management level of the first information security management level is higher than the security management level of the second information security management level; S503. Based on the secondary association logic, obtain the first risk radiation range and the second risk radiation range of the risk information category corresponding to the first information security management level; S504. Obtain the security risk value corresponding to the risk information category as the target security risk value; S505. Combine the target security risk value, the first risk radiation range, and the second risk radiation range to generate a risk assessment report for the information system.

[0072] In steps S501 and S502, the target information security management level refers to the information security management level corresponding to the risk information categories at different information security management levels. It should be noted that the first and second information security management levels are determined through separate comparisons. For example, if the risk information categories are merchant billing information and merchant transaction category record information, as mentioned earlier, they do not belong to the same information security management level, and the information security management level of the merchant transaction category record information (i.e., the target information security management level) is higher than that of the merchant billing information. Therefore, it can be further determined that the merchant transaction category record information corresponds to the first information security management level, and the merchant billing information corresponds to the second information security management level.

[0073] In step S503, the first risk radiation range refers to the risk impact range corresponding to the first information security management level, and the second risk radiation range refers to the risk impact range corresponding to the second information security management level. For example, the risk information category corresponding to the first information security management level is merchant transaction category record information. Merchant transaction category record information focuses more on users' personal privacy backup records. Once the merchant transaction category record information is leaked, lost, or tampered with, it may cause significant deviations in the user consumption data reports generated later or the theft of other user service data, which is the first risk radiation range. Similarly, the corresponding second risk radiation range can be obtained by identifying the second information security management level.

[0074] It should be noted that distinguishing between the target information security management levels and dividing them into the first information security management level and the second information security management level is also to more clearly define the scope of risk impact of the target information security management level. By understanding the scope of risk impact corresponding to each target information security management level, users can be prompted to take effective information security protection measures in advance.

[0075] For example, in certain specific situations, a user's personal privacy information is of high importance. This personal privacy information may be merchant transaction category records. If the merchant bill information is leaked, a malicious third party can obtain the user's purchase records in daily life through the user's merchant bill information. Furthermore, by analyzing the user's purchase records, the user's daily consumption habits and intention to purchase certain goods, i.e., merchant transaction category records, can be obtained indirectly, thus obtaining the user's personal privacy information.

[0076] In steps S504 to S505, a risk assessment report for the information system is generated by combining the first risk radiation range, the second risk radiation range, and the security risk value corresponding to the risk information category. Through this risk assessment report, the overall risk of the current information system can be analyzed by obtaining the risk level corresponding to the risk information category, i.e., the security risk value, and by combining it with the corresponding first or second risk radiation range.

[0077] The information system risk assessment method provided in this embodiment can specifically determine the degree of risk correlation between the first information security management level and the second information security management level based on the first risk radiation range and the second risk radiation range. It can also generate a risk assessment report corresponding to the information system by combining the security risk value of the risk information category itself. Thus, the risk assessment report can more comprehensively show the information risk correlation between various target information security management levels in the information system, thereby improving the accuracy of information system risk assessment.

[0078] In one embodiment of this example, such as Figure 6 As shown, step S504, which combines the target security risk value, the first risk radiation range, and the second risk radiation range, generates a risk assessment report corresponding to the information system, including the following steps: S601. Obtain the risk information items corresponding to the first and second risk radiation ranges; S602. Identify risk information items and obtain their corresponding information importance levels; S603. Combine the information importance level and security risk value to generate a risk assessment report for the information system.

[0079] In step S601, the risk information items corresponding to the first risk radiation range and the second risk radiation range refer to the specific information items in the risk information category that generate risk impact.

[0080] For example, the risk information category is merchant transaction category record information, which includes the user's installment payment purchase records. Through these installment payment purchase records, the user's credit limit data, i.e., the first risk radiation range, can be obtained. Since the credit limit data involves the user's personal credit information, the corresponding risk information items are the installment payment purchase records and the credit limit data.

[0081] For example, the risk information category is merchant billing information. Merchant billing information records the payment method for each of a user's consumption expenditures. Through this payment method, the user's bank or related financial software can be obtained, which is the second risk radiation range. The bank or related financial software is involved in the user's personal financial management, and the corresponding risk information items are the payment method and the bank or financial software.

[0082] In steps S602 to S603, by identifying the risk information items obtained above, the information importance level corresponding to the risk information items can be further obtained. This information importance level can be preset by the user's selection. Then, by combining the information importance level corresponding to the risk information item and the security risk value corresponding to the risk information category, a risk assessment report corresponding to the information system is generated. Through this risk assessment report, the user can understand the risk level of the risk information category and, based on the information importance level, more intuitively reflect the relevant risk impact of specific risk information items in the risk information category.

[0083] The information system risk assessment method provided in this embodiment further identifies and determines the actual information importance level corresponding to each risk information item, and generates a risk assessment report for the information system based on the security risk value corresponding to each risk information item, thereby more intuitively reflecting the risk status of risk information items corresponding to each information importance level.

[0084] In one embodiment of this example, such as Figure 7 As shown, after identifying risk information items and obtaining their corresponding importance levels in step S602, the following steps are also included: S701. Determine whether the importance level of the information meets the preset emergency handling level standard; S702. If the information importance level meets the preset emergency handling level standard, the risk response priority of the risk information item shall be set according to the information importance level, and the information importance level shall be directly proportional to the risk emergency response priority. S703. Based on the risk response priority, output the risk response strategy corresponding to the risk information item.

[0085] In steps S701 to S703, the preset emergency handling level standard refers to a pre-set important information risk identification standard, which can be set according to the actual situation of the user's corresponding information protection. If the information importance level corresponding to the risk information item meets the preset emergency handling level standard, it means that the current risk information item is an information item that requires expedited security handling for the user. Further, the risk response priority of the risk information item is set according to the current information importance level. The information importance level is directly proportional to the risk emergency priority. That is to say, the higher the information importance level corresponding to the risk information item, the higher the corresponding risk response priority.

[0086] In step S703, based on the risk response priorities derived above, the risk response strategy corresponding to the risk information item is output. This risk response strategy is formulated in conjunction with the specific circumstances of the current risk information item. For example, if a user's personal private information is illegally accessed, the corresponding risk response strategy could be to update the access verification method, interrupt the network connection, or back up the user's personal private information.

[0087] The information system risk assessment method provided in this embodiment outputs risk response strategies corresponding to target risk information items according to risk response priorities, thereby enabling timely risk elimination of important information and maximizing the security of important information.

[0088] This application discloses an information system risk assessment system, such as... Figure 8 As shown, it includes: The first acquisition module 1 is used to acquire the information management module corresponding to the information system; Parsing module 2 is used to parse the information management module and obtain the corresponding target information category; The first judgment module 3, if there are multiple target information categories, is used to determine whether the security risk value corresponding to the target information category is within the preset risk threshold. If the security risk value corresponding to the target information category is at a preset risk threshold, the second acquisition module 4 is used to acquire the corresponding risk information category. If there are multiple risk information categories, the second judgment module 5 is used to determine whether the risk information categories are at the same information security management level. If the risk information categories are at the same information security management level, the first generation module 6 is used to obtain and combine the primary association logic between risk information categories and the security risk value corresponding to the risk information category to generate a risk assessment report for the information system. If the risk information categories are not at the same information security management level, the second generation module 7 is used to obtain the secondary association logic corresponding to the risk information category, and combine it with the security risk value corresponding to the risk information category to generate a risk assessment report for the information system.

[0089] The information system risk assessment system provided in this embodiment determines whether the security risk value corresponding to the target information category is at a preset risk threshold based on the first judgment module 3. If it is, it indicates that the information management module to which the target information category belongs has already encountered an information security risk. The system then obtains the specific risk information category corresponding to the target information category through the second acquisition module 4. If there are multiple risk information categories, in order to analyze the information association attributes between multiple risk information categories, the second judgment module 5 determines whether the risk information categories are at the same information security management level. If the risk information categories are at the same information security management level, it indicates that the multiple risk information categories are currently in the same type of information system, i.e., the same information category management system. Further acquisition and... By combining the primary association logic between risk information categories within the same information system and the corresponding security risk values ​​for each risk information category, a risk assessment report for the information system is generated through the first generation module 6. If the risk information categories are not at the same information security management level, i.e., different information category management systems, it indicates that the multiple risk information categories are not in the same type of information system. In this case, the secondary association logic corresponding to the risk information categories in different information systems is obtained and combined with the corresponding security risk values ​​for each risk information category. A risk assessment report for the information system is then generated through the second generation module 7. By combining the specific categories of information and the information correlation between the corresponding management systems, the risks of the information system are comprehensively assessed, thereby improving the accuracy of the information system risk assessment.

[0090] It should be noted that the information system risk assessment system provided in this application embodiment also includes each module and / or corresponding sub-module corresponding to the logical function or logical step of any of the above-mentioned information system risk assessment methods, to achieve the same effect as each logical function or logical step, which will not be elaborated here.

[0091] This application also discloses a terminal device, including a memory, a processor, and computer instructions stored in the memory and capable of running on the processor, wherein the processor executes the computer instructions using any of the information system risk assessment methods described in the above embodiments.

[0092] The terminal device can be a computer device such as a desktop computer, a laptop computer, or a cloud server. The terminal device includes, but is not limited to, a processor and a memory. For example, the terminal device may also include input / output devices, network access devices, and buses.

[0093] The processor can be a central processing unit (CPU). Of course, depending on the actual use, it can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), off-the-shelf programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor, etc., and this application does not limit it.

[0094] The memory can be an internal storage unit of the terminal device, such as a hard disk or RAM of the terminal device, or an external storage device of the terminal device, such as a plug-in hard disk, smart memory card (SMC), secure digital card (SD), or flash memory card (FC) equipped on the terminal device. Furthermore, the memory can be a combination of internal storage units and external storage devices of the terminal device. The memory is used to store computer instructions and other instructions and data required by the terminal device. The memory can also be used to temporarily store data that has been output or will be output. This application does not limit this.

[0095] In this terminal device, any one of the information system risk assessment methods in the above embodiments is stored in the memory of the terminal device and loaded and executed on the processor of the terminal device for convenient use.

[0096] This application also discloses a computer-readable storage medium, which stores computer instructions, wherein when the computer instructions are executed by a processor, any of the information system risk assessment methods described in the above embodiments are employed.

[0097] The computer instructions can be stored in a computer-readable medium. The computer instructions include computer instruction code, which can be in the form of source code, object code, executable file, or certain middleware. The computer-readable medium includes any entity or device capable of carrying computer instruction code, recording media, USB flash drive, portable hard drive, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc. It should be noted that the computer-readable medium includes, but is not limited to, the above-mentioned components.

[0098] In this computer-readable storage medium, any one of the information system risk assessment methods in the above embodiments is stored in the computer-readable storage medium and loaded and executed on the processor to facilitate the storage and application of the above methods.

[0099] The above are all preferred embodiments of this application, and are not intended to limit the scope of protection of this application. Therefore, all equivalent changes made in accordance with the structure, shape and principle of this application should be covered within the scope of protection of this application.

Claims

1. A method for risk assessment of an information system, characterized in that, Includes the following steps: Obtain the information management module corresponding to the information system; The information management module is analyzed to obtain the corresponding target information category; If there are multiple target information categories, then determine whether the security risk value corresponding to the target information category is within the preset risk threshold range; If the security risk value corresponding to the target information category is within the preset risk threshold range, then the corresponding risk information category is obtained; If there are multiple risk information categories, then determine whether the risk information categories are at the same information security management level; If the risk information categories are at the same information security management level, then the primary association logic between the risk information categories and the security risk value corresponding to the risk information category are obtained and combined to generate a risk assessment report for the information system. The primary association logic refers to the risk association relationship between risk information categories within the same information security management level. If the risk information categories are not at the same information security management level, then the secondary association logic corresponding to the risk information category is obtained, and combined with the security risk value corresponding to the risk information category, a risk assessment report corresponding to the information system is generated. The secondary association logic refers to the risk association relationship between risk information categories at different information security management levels. Before determining whether the security risk value corresponding to the target information category is within a preset risk threshold range if there are multiple target information categories, the following steps are also included: The confidentiality, integrity, and availability of the target information categories are acquired and scored to generate corresponding information risk estimates. The operation and maintenance level and security level of the information management module corresponding to the target information category are obtained and scored to generate a corresponding management risk estimate. By combining the information risk estimate and the management risk estimate, the security risk value corresponding to the target information category is generated; If the risk information categories are at the same information security management level, then obtaining and combining the primary correlation logic between the risk information categories and the security risk value corresponding to the risk information category to generate a risk assessment report for the information system includes the following steps: If the risk information categories are at the same information security management level, then according to the primary association logic between the risk information categories, additional risk values ​​corresponding to each risk information category are generated. By combining the additional risk value and the security risk value, a risk assessment report corresponding to the information system is generated. If the risk information categories are not at the same information security management level, then the secondary association logic corresponding to the risk information category is obtained, and combined with the security risk value corresponding to the risk information category, a risk assessment report for the information system is generated, including the following steps: If the risk information category is not in the same information security management level, then obtain the target information security management level corresponding to the risk information category; Determine the first information security management level and the second information security management level in the target information security management level, wherein the security management level of the first information security management level is higher than the security management level of the second information security management level; Based on the secondary association logic, the first risk radiation range corresponding to the risk information category of the first information security management level and the second risk radiation range corresponding to the risk information category of the first information security management level are obtained. The first risk radiation range refers to the risk impact range corresponding to the first information security management level, and the second risk radiation range refers to the risk impact range corresponding to the second information security management level. Obtain the security risk value corresponding to the risk information category as the target security risk value; By combining the target security risk value, the first risk radiation range, and the second risk radiation range, a risk assessment report corresponding to the information system is generated.

2. The information system risk assessment method according to claim 1, characterized in that, If the risk information categories are at the same information security management level, after generating the additional risk value corresponding to each risk information category according to the first-level association logic between the risk information categories, the following steps are also included: Based on the additional risk value, obtain the associated risk information items corresponding to the risk information categories; Identify the risk-guiding information source and risk-inducing information source corresponding to the associated risk information items. The risk-guiding information source refers to the category of risk information that causes the risk to occur, and the risk-inducing information source refers to the category of risk information affected by the risk-guiding information source. By combining the risk guidance information source and the risk inducement information source, a risk distribution diagram corresponding to the risk information category is generated.

3. The information system risk assessment method according to claim 1, characterized in that, The step of generating the risk assessment report corresponding to the information system by combining the target security risk value, the first risk radiation range, and the second risk radiation range includes the following steps: Obtain the risk information items corresponding to the first risk radiation range and the second risk radiation range; Identify the risk information items and obtain their corresponding information importance levels; Based on the information importance level and the security risk value, a risk assessment report corresponding to the information system is generated.

4. The information system risk assessment method according to claim 3, characterized in that, After identifying the risk information item and obtaining its corresponding importance level, the method further includes the following steps: Determine whether the importance level of the information meets the preset emergency handling level standard; If the importance level of the information meets the preset emergency handling level standard, then the risk response priority of the risk information item is set according to the importance level of the information, and the importance level of the information is proportional to the risk emergency priority. Based on the risk response priority, output the risk response strategy corresponding to the risk information item.

5. An information system risk assessment system, characterized in that, The information system risk assessment system according to any one of claims 1-4 is applied, the information system risk assessment system comprising: The first acquisition module (1) is used to acquire the information management module corresponding to the information system; The parsing module (2) is used to parse the information management module and obtain the corresponding target information category; First judgment module (3): If there are multiple target information categories, the judgment module is used to determine that the security risk value corresponding to the target information category is within a preset risk threshold range; If the security risk value corresponding to the target information category is within the preset risk threshold range, the second acquisition module (4) is used to acquire the corresponding risk information category. If there are multiple risk information categories, the second judgment module (5) is used to determine whether the risk information categories are at the same information security management level. If the risk information categories are at the same information security management level, the first generation module (6) is used to obtain and combine the first-level association logic between the risk information categories and the security risk value corresponding to the risk information category to generate a risk assessment report corresponding to the information system. If the risk information category is not at the same information security management level, the second generation module (7) is used to obtain the secondary association logic corresponding to the risk information category and, in combination with the security risk value corresponding to the risk information category, generate a risk assessment report corresponding to the information system.

6. A terminal device, comprising a memory and a processor, characterized in that, The memory stores computer instructions that can run on the processor. When the processor loads and executes the computer instructions, it employs an information system risk assessment method as described in any one of claims 1 to 4.

7. A computer-readable storage medium storing computer instructions, characterized in that, When the computer instructions are loaded and executed by the processor, an information system risk assessment method as described in any one of claims 1 to 4 is employed.

Images