Enterprise information security processing method, system, readable storage medium and computer

Abstract

The present invention provides a method, system, readable storage medium and computer for enterprise information security processing, the method comprising: performing information division on each enterprise information data based on information risk division rules to obtain enterprise asset information and enterprise operation information of each enterprise information data; performing information analysis on the enterprise asset information and enterprise operation information of each enterprise information data according to the weight level obtained by weight evaluation of enterprise evaluation indicators using an indicator weight model to obtain asset defect degree and operation fluency; performing security risk assessment on each enterprise information data according to the asset defect degree and operation fluency, and calling the corresponding security processing strategy according to the security risk assessment result to perform enterprise information security processing. The present invention uses the asset defect degree and operation fluency to perform security risk assessment on enterprise information data, and calls the corresponding security processing strategy according to the security risk assessment result, thereby improving the efficiency and accuracy of security processing.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to an enterprise information security processing method, system, readable storage medium and computer. Background Art

[0002] With the improvement of people's living standards and the rapid development of science and technology, the level of informatization is gradually increasing. The security of corporate information has also become a major technical issue that all industries need to face.

[0003] At present, the security risks of enterprise information are mainly assessed by corresponding experts visiting enterprises for on-site investigations, investigating and analyzing various information in the enterprise, and giving corresponding scores and suggestions based on the results of the investigation and analysis, so that the enterprise can deal with the enterprise information risks according to the suggestions. However, this method has the problem of long periodicity, which leads to a large waste of manpower and material resources; and the current enterprise information risk handling method is to use the Bayesian network method. However, the Bayesian network requires specific analysis of the risk issues of enterprise information, and its determination conditions are relatively complex, resulting in low accuracy of the evaluation results. Summary of the invention

[0004] Based on this, the purpose of the present invention is to provide an enterprise information security processing method, system, readable storage medium and computer to at least solve the deficiencies in the above-mentioned technology.

[0005] The present invention provides an enterprise information security processing method, comprising:

[0006] Acquire a number of enterprise information data, and divide each of the enterprise information data based on the information risk division rule to obtain enterprise asset information and enterprise operation information corresponding to each enterprise information data;

[0007] Constructing enterprise evaluation indicators, and using a preset indicator weight model to perform weight evaluation on the enterprise evaluation indicators to obtain corresponding weight levels;

[0008] According to the weight level, the enterprise asset information and the enterprise operation information corresponding to each enterprise information data are respectively analyzed to obtain the asset defect degree and the operation smoothness corresponding to each enterprise information data;

[0009] A security risk assessment is performed on each of the enterprise information data according to the asset defect degree and the operation smoothness, and a corresponding security processing strategy is called based on the security risk assessment result, and enterprise information security processing is performed according to the security processing strategy.

[0010] Furthermore, the steps of dividing the enterprise information data based on the information risk division rule to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data include:

[0011] Construct subjective evaluation indicators based on enterprise information standard data and their corresponding evaluation results, and use the constructed subjective evaluation indicators to construct information risk planning rules;

[0012] The information risk planning rules are used to divide the enterprise information data to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data.

[0013] Furthermore, the steps of constructing enterprise evaluation indicators and weighting the enterprise evaluation indicators using a preset indicator weight model to obtain corresponding weight levels include:

[0014] Constructing a number of enterprise evaluation indicators, and using a preset indicator weight model to calculate the impact degree of each of the enterprise evaluation indicators, so as to obtain the impact degree corresponding to each of the enterprise evaluation indicators;

[0015] Sorting the enterprise evaluation indicators according to their corresponding influence levels to obtain a corresponding indicator ranking table, and calculating the importance of two adjacent enterprise evaluation indicators in the indicator ranking table to obtain a corresponding importance relationship list;

[0016] A weight evaluation is performed on each of the enterprise evaluation indicators based on the importance relationship list to obtain a corresponding weight level.

[0017] Further, the steps of respectively analyzing the enterprise asset information and the enterprise operation information corresponding to each enterprise information data according to the weight level to respectively obtain the asset defect degree and the operation smoothness corresponding to each enterprise information data include:

[0018] According to the weight level, defect data calculation is performed on the enterprise asset information and the enterprise operation information corresponding to each enterprise information data to obtain defect data of each enterprise asset information and defect data of each enterprise operation information;

[0019] The asset defect degree of the enterprise asset information is calculated based on the defect data of each enterprise asset information, the enterprise asset information and the weight level, and the operation smoothness of the enterprise operation information is calculated based on the defect data of each enterprise operation information, the enterprise operation information and the weight level.

[0020] Furthermore, the asset defect degree is expressed as follows:

[0021] ;

[0022] In the formula, Indicates Enterprise asset information of enterprise information data, Indicates Defective data in the enterprise asset information of the enterprise information data, Indicates The total amount of enterprise asset information of enterprise information data, Indicates The weight coefficient of the weight level of the enterprise evaluation index corresponding to the enterprise asset information of each enterprise information data;

[0023] The expression formula of the running smoothness is:

[0024] ;

[0025] In the formula, Indicates Enterprise operation information of enterprise information data, Indicates Defect data of enterprise operation information of enterprise information data, Indicates The total amount of enterprise operation information of enterprise information data, Indicates The weight coefficient of the weight level of the enterprise evaluation index corresponding to the enterprise operation information of each enterprise information data.

[0026] The present invention also provides an enterprise information security processing system, comprising:

[0027] An information acquisition module is used to acquire a number of enterprise information data, and divide each of the enterprise information data based on information risk division rules to obtain enterprise asset information and enterprise operation information corresponding to each enterprise information data;

[0028] An indicator construction module is used to construct enterprise evaluation indicators and use a preset indicator weight model to perform weight evaluation on the enterprise evaluation indicators to obtain corresponding weight levels;

[0029] An information analysis module, for performing information analysis on the enterprise asset information and enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain the asset defect degree and operation smoothness corresponding to each enterprise information data;

[0030] The security processing module is used to perform security risk assessment on each of the enterprise information data according to the asset defect degree and the operation smoothness, and call the corresponding security processing strategy based on the security risk assessment result, and perform enterprise information security processing according to the security processing strategy.

[0031] Furthermore, the information acquisition module includes:

[0032] An indicator construction unit, used to construct subjective evaluation indicators based on enterprise information standard data and corresponding evaluation results, and to construct information risk planning rules using the constructed subjective evaluation indicators;

[0033] The information division unit is used to divide the enterprise information data by using the information risk planning rules to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data.

[0034] Furthermore, the indicator construction module includes:

[0035] An indicator construction unit, used to construct a number of enterprise evaluation indicators, and use a preset indicator weight model to calculate the influence degree of each of the enterprise evaluation indicators to obtain the influence degree corresponding to each of the enterprise evaluation indicators;

[0036] An indicator calculation unit, used to sort the enterprise evaluation indicators according to their corresponding influence levels to obtain a corresponding indicator sorting table, and to calculate the importance of two adjacent enterprise evaluation indicators in the indicator sorting table to obtain a corresponding importance relationship list;

[0037] A weight evaluation unit is used to perform weight evaluation on each of the enterprise evaluation indicators based on the importance relationship list to obtain a corresponding weight level.

[0038] Furthermore, the information analysis module includes:

[0039] A defect data processing unit, used to calculate defect data for the enterprise asset information and the enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain defect data of each enterprise asset information and defect data of each enterprise operation information;

[0040] The information analysis unit is used to calculate the asset defect degree of the enterprise asset information based on the defect data of each enterprise asset information, the enterprise asset information and the weight level, and to calculate the operation smoothness of the enterprise operation information based on the defect data of each enterprise operation information, the enterprise operation information and the weight level.

[0041] The present invention also provides a readable storage medium on which a computer program is stored, and when the program is executed by a processor, the above-mentioned enterprise information security processing method is implemented.

[0042] The present invention also proposes a computer, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned enterprise information security processing method when executing the computer program.

[0043] The enterprise information security processing method, system, readable storage medium and computer of the present invention divide the enterprise information data, and analyze the weight level obtained by weight evaluation by constructing enterprise evaluation indicators, so as to obtain the asset defect degree and operation fluency corresponding to the enterprise information data. The weight level can be used to reduce the influence of other factors on the risk assessment of the enterprise information data, thereby improving the accuracy of the assessment; the asset defect degree and operation fluency are used to conduct security risk assessment on the enterprise information data, and the corresponding security processing strategy is called according to the security risk assessment results, thereby improving the efficiency and accuracy of security processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 is a flow chart of the enterprise information security processing method in the first embodiment of the present invention;

[0045] Figure 2 for Figure 1 Detailed flow chart of step S101;

[0046] Figure 3 for Figure 1 Detailed flow chart of step S102;

[0047] Figure 4 for Figure 1 Detailed flow chart of step S103;

[0048] Figure 5 It is a structural block diagram of the enterprise information security processing system in the second embodiment of the present invention;

[0049] Figure 6 FIG. 4 is a structural block diagram of a computer in a third embodiment of the present invention.

[0050] The following specific implementation manner will further illustrate the present invention in conjunction with the above-mentioned drawings. DETAILED DESCRIPTION

[0051] In order to facilitate the understanding of the present invention, the present invention will be described more fully below with reference to the relevant drawings. Several embodiments of the present invention are given in the drawings. However, the present invention can be implemented in many different forms and is not limited to the embodiments described herein. On the contrary, the purpose of providing these embodiments is to make the disclosure of the present invention more thorough and comprehensive.

[0052] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which the present invention belongs. The terms used herein in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "and / or" used herein includes any and all combinations of one or more of the related listed items.

[0053] Embodiment 1

[0054] See also Figure 1 , which shows the enterprise information security processing method in the first embodiment of the present invention, and the method specifically includes steps S101 to S104:

[0055] S101, obtaining a number of enterprise information data, and dividing each of the enterprise information data based on information risk division rules to obtain enterprise asset information and enterprise operation information corresponding to each enterprise information data;

[0056] For further information, see Figure 2 , the step S101 specifically includes steps S1011~S1012:

[0057] S1011, constructing subjective evaluation indicators based on enterprise information standard data and their corresponding evaluation results, and constructing information risk planning rules using the constructed subjective evaluation indicators;

[0058] S1012: Using the information risk planning rules, the enterprise information data are divided to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data.

[0059] In the specific implementation, a number of enterprise information data are obtained based on the enterprise information platform, and subjective evaluation indicators are constructed according to the enterprise information standard data and its corresponding evaluation results. It should be noted that the enterprise information standard data is the enterprise information data that has completed the enterprise information security processing, which contains various information of the enterprise, such as: operation information, financial information and other information data related to the operation of the enterprise, and the operation information contains management information, personnel information and other information. Various relevant indicators in the enterprise information standard data are extracted, and subjective evaluation indicators are constructed according to the score value obtained by evaluating the indicator. The constructed subjective evaluation indicators are used to construct information risk planning rules, and the subjective evaluation indicators are divided according to the degree of risk. Among them, the higher the score value of the subjective evaluation indicator, the greater the importance of the subjective evaluation indicator.

[0060] S102, constructing enterprise evaluation indicators, and using a preset indicator weight model to perform weight evaluation on the enterprise evaluation indicators to obtain corresponding weight levels;

[0061] For further information, see Figure 3 , the step S102 specifically includes steps S1021 to S1023:

[0062] S1021, constructing a number of enterprise evaluation indicators, and using a preset indicator weight model to calculate the influence degree of each of the enterprise evaluation indicators, so as to obtain the influence degree corresponding to each of the enterprise evaluation indicators;

[0063] S1022, sorting the enterprise evaluation indicators according to their corresponding influence levels to obtain a corresponding indicator sorting table, and calculating the importance of two adjacent enterprise evaluation indicators in the indicator sorting table to obtain a corresponding importance relationship list;

[0064] S1023: Perform weight evaluation on each of the enterprise evaluation indicators based on the importance relationship list to obtain a corresponding weight level.

[0065] In the specific implementation, the factors affecting enterprise information security are found through literature and other means, and the enterprise evaluation indicators among the influencing factors are determined according to the principle, goal and functionality of the indicators. It is assumed that the set of enterprise evaluation indicators of the same type is , It represents the number of enterprise evaluation indicators, and calculates the influence of the enterprise evaluation indicator set through the pre-built indicator weight model, so as to obtain the influence degree corresponding to each enterprise evaluation indicator, sort each enterprise evaluation indicator according to the influence degree, and use the obtained indicator sorting table to calculate the importance of two adjacent enterprise evaluation indicators to obtain the corresponding important relationship list. Specifically, the influence degrees of two adjacent enterprise evaluation indicators are compared to obtain the importance of the two adjacent enterprise evaluation indicators, where the expression formula of importance is:

[0066] ;

[0067] In the formula, Indicates Enterprise evaluation indicators The degree of influence Indicates Enterprise evaluation indicators the extent of the impact;

[0068] Among them, when =1, indicating the Enterprise evaluation indicators With Enterprise evaluation indicators The importance of When >1, it means Enterprise evaluation indicators The importance of Enterprise evaluation indicators ,when When <1, it means Enterprise evaluation indicators is less important than Enterprise evaluation indicators .

[0069] Furthermore, each enterprise evaluation index is assigned a value according to the importance relationship list obtained above, so as to obtain a corresponding weight level.

[0070] S103, analyzing the enterprise asset information and enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain the asset defect degree and operation smoothness corresponding to each enterprise information data;

[0071] For further information, see Figure 4 , the step S103 specifically includes steps S1031~S1032:

[0072] S1031, respectively calculating defect data of the enterprise asset information and the enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain defect data of each enterprise asset information and defect data of each enterprise operation information;

[0073] S1032, calculating the asset defect degree of the enterprise asset information based on the defect data of each enterprise asset information, the enterprise asset information and the weight level, and calculating the operation smoothness of the enterprise operation information based on the defect data of each enterprise operation information, the enterprise operation information and the weight level.

[0074] In specific implementation, defect data calculation is performed on the enterprise asset information and enterprise operation information corresponding to each enterprise information data according to the weight level obtained above, so as to obtain defect data of each enterprise asset information and defect data of each enterprise operation information, wherein the defect data is the weak points existing in the enterprise asset information or enterprise operation information in the process of enterprise information security processing, and the information needs to be improved or repaired;

[0075] Furthermore, the weight level of the enterprise evaluation index corresponding to each enterprise asset information is determined, and the corresponding weight coefficient is determined according to each weight level, and the asset defect degree of the enterprise asset information is calculated according to the defect data of each enterprise asset information, the enterprise asset information and the weight coefficient, wherein the expression formula of the asset defect degree is:

[0076] ;

[0077] In the formula, Indicates Enterprise asset information of enterprise information data, Indicates Defective data in the enterprise asset information of the enterprise information data, Indicates The total amount of enterprise asset information of enterprise information data, Indicates The weight coefficient of the weight level of the enterprise evaluation index corresponding to the enterprise asset information of each enterprise information data;

[0078] Furthermore, the weight level of the enterprise evaluation index corresponding to each enterprise operation information is determined, and the corresponding weight coefficient is determined according to each weight level. The operation smoothness of the enterprise operation information is calculated according to the defect data of each enterprise operation information, the enterprise operation information and the weight coefficient. The expression formula of the operation smoothness is:

[0079] ;

[0080] In the formula, Indicates Enterprise operation information of enterprise information data, Indicates Defect data of enterprise operation information of enterprise information data, Indicates The total amount of enterprise operation information of enterprise information data, Indicates The weight coefficient of the weight level of the enterprise evaluation index corresponding to the enterprise operation information of each enterprise information data.

[0081] S104, performing security risk assessment on each of the enterprise information data according to the asset defect degree and the operation smoothness, calling a corresponding security processing strategy based on the security risk assessment result, and performing enterprise information security processing according to the security processing strategy.

[0082] In the specific implementation, the asset defect degree and operation smoothness obtained above are used to conduct security risk assessment on the information data of each enterprise to obtain the corresponding risk assessment value, wherein the calculation formula of the risk assessment value of the security risk assessment result is:

[0083] ;

[0084] In the formula, Indicates The total assessed value of enterprise information data, Asset Defectivity The evaluation coefficient of is a constant; Indicates The smoothness of the operation of the enterprise operation information of each enterprise information data, For smooth operation The evaluation coefficient of is a constant.

[0085] Furthermore, a preset risk assessment value range is constructed, and the corresponding policy code is determined according to the risk assessment value obtained above and the preset risk assessment value range, the corresponding security processing policy is called according to the policy code, and information security processing is performed on the enterprise information data according to the security processing policy.

[0086] In summary, the enterprise information security processing method in the above-mentioned embodiment of the present invention divides the enterprise information data, and analyzes the weight level obtained by weight evaluation by constructing enterprise evaluation indicators, so as to obtain the asset defect degree and operation smoothness corresponding to the enterprise information data. The weight level can be used to reduce the influence of other factors on the risk assessment of the enterprise information data, thereby improving the accuracy of the assessment; the asset defect degree and operation smoothness are used to conduct security risk assessment on the enterprise information data, and the corresponding security processing strategy is called according to the security risk assessment results, thereby improving the efficiency and accuracy of security processing.

[0087] Embodiment 2

[0088] Another aspect of the present invention is to provide an enterprise information security processing system, please refer to Figure 5 , which shows an enterprise information security processing system in a second embodiment of the present invention, and the system includes:

[0089] The information acquisition module 11 is used to acquire a number of enterprise information data, and divide the enterprise information data based on the information risk division rule to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data;

[0090] Furthermore, the information acquisition module 11 includes:

[0091] An indicator construction unit, used to construct subjective evaluation indicators based on enterprise information standard data and corresponding evaluation results, and to construct information risk planning rules using the constructed subjective evaluation indicators;

[0092] The information division unit is used to divide the enterprise information data by using the information risk planning rules to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data.

[0093] The indicator construction module 12 is used to construct enterprise evaluation indicators and use a preset indicator weight model to perform weight evaluation on the enterprise evaluation indicators to obtain corresponding weight levels;

[0094] Furthermore, the indicator construction module 12 includes:

[0095] An indicator construction unit, used to construct a number of enterprise evaluation indicators, and use a preset indicator weight model to calculate the influence degree of each of the enterprise evaluation indicators to obtain the influence degree corresponding to each of the enterprise evaluation indicators;

[0096] An indicator calculation unit, used to sort the enterprise evaluation indicators according to their corresponding influence levels to obtain a corresponding indicator sorting table, and to calculate the importance of two adjacent enterprise evaluation indicators in the indicator sorting table to obtain a corresponding importance relationship list;

[0097] A weight evaluation unit is used to perform weight evaluation on each of the enterprise evaluation indicators based on the importance relationship list to obtain a corresponding weight level.

[0098] The information analysis module 13 is used to analyze the enterprise asset information and enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain the asset defect degree and operation smoothness corresponding to each enterprise information data;

[0099] Furthermore, the information analysis module 13 includes:

[0100] A defect data processing unit, used to calculate defect data for the enterprise asset information and the enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain defect data of each enterprise asset information and defect data of each enterprise operation information;

[0101] The information analysis unit is used to calculate the asset defect degree of the enterprise asset information based on the defect data of each enterprise asset information, the enterprise asset information and the weight level, and to calculate the operation smoothness of the enterprise operation information based on the defect data of each enterprise operation information, the enterprise operation information and the weight level.

[0102] The security processing module 14 is used to perform security risk assessment on each of the enterprise information data according to the asset defect degree and the operation smoothness, and call the corresponding security processing strategy based on the security risk assessment result, and perform enterprise information security processing according to the security processing strategy.

[0103] The functions or operation steps implemented when the above modules and units are executed are generally the same as those in the above method embodiments, and will not be repeated here.

[0104] The enterprise information security processing system provided in the embodiment of the present invention has the same implementation principle and technical effects as those of the aforementioned method embodiment. For the sake of brief description, for matters not mentioned in the system embodiment, reference may be made to the corresponding contents in the aforementioned method embodiment.

[0105] Embodiment 3

[0106] The present invention also provides a computer, see Figure 6, shown is a computer in the third embodiment of the present invention, including a memory 10, a processor 20, and a computer program 30 stored in the memory 10 and executable on the processor 20, and the processor 20 implements the above-mentioned enterprise information security processing method when executing the computer program 30.

[0107] The memory 10 includes at least one type of readable storage medium, which includes a flash memory, a hard disk, a multimedia card, a card-type memory (e.g., an SD or DX memory, etc.), a magnetic memory, a magnetic disk, an optical disk, etc. In some embodiments, the memory 10 may be an internal storage unit of a computer, such as a hard disk of the computer. In other embodiments, the memory 10 may also be an external storage device, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card, etc. Further, the memory 10 may also include both an internal storage unit of the computer and an external storage device. The memory 10 may be used not only to store application software and various types of data installed in the computer, but also to temporarily store data that has been output or is to be output.

[0108] Among them, in some embodiments, the processor 20 can be an electronic control unit (Electronic Control Unit, abbreviated as ECU, also known as a vehicle computer), a central processing unit (Central Processing Unit, CPU), a controller, a microcontroller, a microprocessor or other data processing chip, used to run the program code stored in the memory 10 or process data, such as executing access restriction programs, etc.

[0109] It should be pointed out that Figure 6 The structure shown does not constitute a limitation on the computer. In other embodiments, the computer may include fewer or more components than shown in the figure, or combine certain components, or arrange the components differently.

[0110] An embodiment of the present invention further provides a readable storage medium on which a computer program is stored. When the program is executed by a processor, the enterprise information security processing method as described above is implemented.

[0111] Those skilled in the art will appreciate that the logic and / or steps represented in the flowchart or otherwise described herein, for example, may be considered as an ordered list of executable instructions for implementing logical functions, and may be specifically implemented in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For purposes of this specification, "computer-readable medium" may be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0112] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0113] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or a combination thereof: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0114] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0115] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A method for processing enterprise information security, characterized in that: include: Acquire a number of enterprise information data, and divide each of the enterprise information data based on the information risk division rule to obtain enterprise asset information and enterprise operation information corresponding to each enterprise information data; Constructing enterprise evaluation indicators, and using a preset indicator weight model to perform weight evaluation on the enterprise evaluation indicators to obtain corresponding weight levels, wherein the steps of constructing enterprise evaluation indicators, and using a preset indicator weight model to perform weight evaluation on the enterprise evaluation indicators to obtain corresponding weight levels include: Constructing a number of enterprise evaluation indicators, and using a preset indicator weight model to calculate the impact degree of each of the enterprise evaluation indicators, so as to obtain the impact degree corresponding to each of the enterprise evaluation indicators; Sorting the enterprise evaluation indicators according to their corresponding influence levels to obtain a corresponding indicator ranking table, and calculating the importance of two adjacent enterprise evaluation indicators in the indicator ranking table to obtain a corresponding importance relationship list; Performing a weight evaluation on each of the enterprise evaluation indicators based on the importance relationship list to obtain a corresponding weight level; According to the weight level, the enterprise asset information and the enterprise operation information corresponding to each enterprise information data are respectively analyzed to obtain the asset defect degree and the operation smoothness corresponding to each enterprise information data, wherein the steps of respectively analyzing the enterprise asset information and the enterprise operation information corresponding to each enterprise information data according to the weight level to obtain the asset defect degree and the operation smoothness corresponding to each enterprise information data include: According to the weight level, defect data calculation is performed on the enterprise asset information and the enterprise operation information corresponding to each enterprise information data to obtain defect data of each enterprise asset information and defect data of each enterprise operation information; Calculating the asset defect degree of the enterprise asset information according to the defect data of each enterprise asset information, the enterprise asset information and the weight level, and calculating the operation smoothness of the enterprise operation information according to the defect data of each enterprise operation information, the enterprise operation information and the weight level; A security risk assessment is performed on each of the enterprise information data according to the asset defect degree and the operation smoothness, and a corresponding security processing strategy is called based on the security risk assessment result, and enterprise information security processing is performed according to the security processing strategy.

2. The enterprise information security processing method according to claim 1, characterized in that: The steps of dividing the enterprise information data based on the information risk division rule to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data include: Construct subjective evaluation indicators based on enterprise information standard data and their corresponding evaluation results, and use the constructed subjective evaluation indicators to construct information risk classification rules; The information risk classification rules are used to classify the enterprise information data to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data.

3. The enterprise information security processing method according to claim 1, characterized in that: The asset defect degree is expressed as follows: ； In the formula, Indicates Enterprise asset information of enterprise information data, Indicates Defective data in the enterprise asset information of the enterprise information data, Indicates The total amount of enterprise asset information of enterprise information data, Indicates The weight coefficient of the weight level of the enterprise evaluation index corresponding to the enterprise asset information of each enterprise information data; The expression formula of the running smoothness is: ； In the formula, Indicates Enterprise operation information of enterprise information data, Indicates Defect data of enterprise operation information of enterprise information data, Indicates The total amount of enterprise operation information of enterprise information data, Indicates The weight coefficient of the weight level of the enterprise evaluation index corresponding to the enterprise operation information of each enterprise information data.

4. An enterprise information security processing system, characterized in that: include: An information acquisition module is used to acquire a number of enterprise information data, and divide each of the enterprise information data based on information risk division rules to obtain enterprise asset information and enterprise operation information corresponding to each enterprise information data; The indicator construction module is used to construct enterprise evaluation indicators and use a preset indicator weight model to perform weight evaluation on the enterprise evaluation indicators to obtain corresponding weight levels, wherein the indicator construction module includes: An indicator construction unit, used to construct a number of enterprise evaluation indicators, and use a preset indicator weight model to calculate the influence degree of each of the enterprise evaluation indicators to obtain the influence degree corresponding to each of the enterprise evaluation indicators; An indicator calculation unit, used to sort the enterprise evaluation indicators according to their corresponding influence levels to obtain a corresponding indicator sorting table, and to calculate the importance of two adjacent enterprise evaluation indicators in the indicator sorting table to obtain a corresponding importance relationship list; A weight evaluation unit, used for performing a weight evaluation on each of the enterprise evaluation indicators based on the importance relationship list to obtain a corresponding weight level; An information analysis module is used to analyze the enterprise asset information and enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain the asset defect degree and operation smoothness corresponding to each enterprise information data, wherein the information analysis module includes: A defect data processing unit, used to calculate defect data for the enterprise asset information and the enterprise operation information corresponding to each enterprise information data according to the weight level, so as to obtain defect data of each enterprise asset information and defect data of each enterprise operation information; an information analysis unit, configured to calculate the asset defect degree of the enterprise asset information according to the defect data of each enterprise asset information, the enterprise asset information and the weight level, and calculate the operation smoothness of the enterprise operation information according to the defect data of each enterprise operation information, the enterprise operation information and the weight level; The security processing module is used to perform security risk assessment on each of the enterprise information data according to the asset defect degree and the operation smoothness, and call the corresponding security processing strategy based on the security risk assessment result, and perform enterprise information security processing according to the security processing strategy.

5. The enterprise information security processing system according to claim 4, characterized in that: The information acquisition module includes: An indicator construction unit, used to construct subjective evaluation indicators based on enterprise information standard data and corresponding evaluation results, and to construct information risk classification rules using the constructed subjective evaluation indicators; The information division unit is used to divide the enterprise information data by using the information risk division rule to obtain the enterprise asset information and enterprise operation information corresponding to each enterprise information data.

6. A readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the enterprise information security processing method as described in any one of claims 1 to 3 is implemented.

7. A computer comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the enterprise information security processing method as described in any one of claims 1 to 3 is implemented.

Images