A dynamic evaluation system and method for network information security

Abstract

The present invention provides a dynamic evaluation system and method for network information security. The system obtains user network information of users in the network and network node information of the network structure, establishes a first network security evaluation mechanism for the network based on the user network information, and establishes a second network security evaluation mechanism for the network based on the network node information. The evaluation mechanism is established from the user aspect and the network node aspect, and the first network security evaluation mechanism and the second network security evaluation mechanism are integrated to obtain a target network security evaluation mechanism, thereby ensuring the comprehensiveness and accuracy of the obtained target network security evaluation mechanism. The real-time network collected data is input into the target network security evaluation mechanism to obtain a dynamic evaluation coefficient for network information security, thereby improving the evaluation accuracy and ensuring network security.

Description

Technical Field

[0001] The present invention relates to the technical field of network security, and in particular to a dynamic evaluation system and method for network information security. Background Art

[0002] Network information resources refer to the sum of various information resources that are published, transmitted and stored through the network by computers in the form of electronic resource data, with various forms of information such as text, images, sounds and animations stored in non-printed media such as optical and magnetic materials. Since the information storage form and data structure are universal, open and standardized, it is easier to copy and distribute network information resources. Therefore, without considering copyright, one resource can serve an unlimited number of users at the same time with an unlimited number of copies. The network breaks the time and space boundaries of transmission. Users can obtain information resources at any time and any place, which maximizes the extension and expansion of the time and space scope of network information resource dissemination. Several users can share the same information resource at the same time.

[0003] The security of network information resources on the Internet is very important. Application number CN202111599422.1 provides a network information security dynamic evaluation system and method, which uses a network security dynamic evaluation model to perform a dynamic evaluation of network security. The evaluation mechanism is single, and it is prone to evaluation failures and low evaluation accuracy, which ultimately leads to network security problems. Summary of the invention

[0004] The present invention provides a dynamic evaluation system and method for network information security, which are used to solve the problems raised by the background technology.

[0005] A dynamic evaluation system for network information security, comprising:

[0006] An information acquisition module is used to acquire user network information of users in the network and network node information of the network structure;

[0007] A mechanism establishment module, used to establish a first network security evaluation mechanism for the network based on user network information, and to establish a second network security evaluation mechanism for the network based on network node information;

[0008] A mechanism fusion module, used to fuse the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a target network security evaluation mechanism;

[0009] The security evaluation module is used to input the real-time network collected data into the target network security evaluation mechanism to obtain a dynamic evaluation coefficient for network information security.

[0010] Preferably, the information acquisition module includes:

[0011] A login information acquisition unit, used to acquire the login information of the user in the network, and integrate the login information according to the user identity and login time to obtain the target login information;

[0012] An operation information acquisition unit, used to acquire the user's operation information in the network, and integrate the operation information according to the operation type and operation time to obtain target operation information;

[0013] The associating unit is used to associate the target login information with the target operation information, and obtain the user network information based on the association result.

[0014] Preferably, the information acquisition module further includes:

[0015] A feature acquisition unit, used to acquire network architecture features, deployment situation features, application features and system configuration features from the network structure;

[0016] A basic information acquisition unit, used to obtain basic node information of each network node in the network structure based on network architecture characteristics, deployment situation characteristics, application characteristics and system configuration characteristics;

[0017] A dynamic information acquisition unit, used to collect dynamic operation data of network nodes and use the dynamic operation data as node dynamic information;

[0018] The information storage unit is used to store the node basic information and node dynamic information to obtain network node information.

[0019] Preferably, the mechanism establishment module includes:

[0020] A parameter determination unit, used to establish evaluation parameters for users based on historical user network security issues, and to establish an evaluation parameter structure diagram based on associations between the evaluation parameters;

[0021] The first mechanism determination unit is used to establish a first network security evaluation mechanism that satisfies the evaluation parameter structure diagram based on an evaluation tool.

[0022] Preferably, the mechanism establishment module further includes:

[0023] An indicator determination unit, used to determine evaluation indicators for network nodes and indicator weights of the evaluation indicators based on historical security issues of the network nodes;

[0024] A method determination unit, used for obtaining relevant node information associated with the evaluation index from the network node information, inputting the relevant node information into the network operation hierarchical model to determine the network layer where the relevant node information is located, and determining the evaluation method for the network node information at the network layer based on the layer structure characteristics of the network layer in all network layers;

[0025] A layer weighted processing unit, for integrating and sorting the evaluation methods of all network layers where the network node information is located based on the hierarchical characteristics between all network layers where the network node information is located, to obtain an evaluation method sequence for the network node information, and for weighting the evaluation method sequence based on the layer weight of the network layer where the network node information is located, to obtain an evaluation method weighted sequence;

[0026] An indicator weighting processing unit, used to establish an evaluation method weighting matrix of all evaluation indicators based on the evaluation method weighting sequence, and perform secondary weighting on the evaluation method weighting matrix based on the indicator weights of the evaluation indicators to obtain a target evaluation method weighting matrix;

[0027] The second mechanism determination unit is used to establish a weighted evaluation standard matrix corresponding to the target evaluation method weighted matrix, and to establish a second network security evaluation mechanism that satisfies the weighted evaluation standard matrix based on an evaluation tool.

[0028] Preferably, the mechanism fusion module includes:

[0029] A vulnerability determination unit, used to obtain all evaluation indicators in the first network security evaluation mechanism and the second network security evaluation mechanism, and determine the security vulnerabilities to be analyzed of network information security based on all evaluation indicators and in combination with the indicator-vulnerability relationship database;

[0030] A content selection unit, used to obtain relevant indicators corresponding to the security vulnerabilities to be analyzed from the indicator-vulnerability relationship database, and obtain mechanism contents related to the relevant indicators from the first network security evaluation mechanism and the second network security evaluation mechanism;

[0031] A rule determination unit, configured to determine a first fusion rule for the first network security evaluation mechanism and the second network security evaluation mechanism based on the evaluation levels of the mechanism content in the first network security evaluation mechanism and the second network security evaluation mechanism;

[0032] The rule determination unit is further used to perform a resource occupation test on the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a resource occupation score corresponding to each evaluation level, and establish a second fusion rule of the first network security evaluation mechanism and the second network security evaluation mechanism based on the resource occupation score;

[0033] A scheme determining unit, configured to determine a fusion scheme for a first network security evaluation mechanism and a second network security evaluation mechanism based on the first fusion rule;

[0034] A scheme selection unit, configured to perform operation evaluation on the plurality of mechanism fusion schemes based on the second fusion rule to obtain a target mechanism fusion scheme with the highest operation efficiency;

[0035] The fusion unit is used to fuse the first network security evaluation mechanism and the second network security evaluation mechanism according to the target mechanism fusion scheme to obtain a target network security evaluation mechanism.

[0036] Preferably, the scheme selection unit includes:

[0037] A scoring unit, configured to perform an operation evaluation on the multiple mechanism fusion scheme based on the second fusion rule to obtain a comprehensive resource score;

[0038] The selection unit is used to select the mechanism fusion scheme with the highest comprehensive resource score as the target mechanism fusion scheme with the highest operating efficiency.

[0039] Preferably, the safety assessment module includes:

[0040] A classification unit, used to obtain a data type input rule of a target network security assessment mechanism, and classify the network real-time collected data according to the data type input rule to obtain category collected data;

[0041] The evaluation unit is used to input the category collected data into the target network security evaluation mechanism according to the data type input rule to obtain a dynamic evaluation coefficient for network information security.

[0042] Preferably, it also includes a policy determination module, which is used to determine the network information maintenance policy related to the dynamic evaluation coefficient based on the dynamic evaluation coefficient of network information security.

[0043] An evaluation method for a dynamic evaluation system of network information security, comprising:

[0044] S1: Obtain user network information of the user in the network and obtain network node information of the network structure;

[0045] S2: Based on the user network information, a first network security evaluation mechanism for the network is established, and based on the network node information, a second network security evaluation mechanism for the network is established;

[0046] S3: integrating the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a target network security evaluation mechanism;

[0047] S4: Input the real-time network collected data into the target network security assessment mechanism to obtain a dynamic evaluation coefficient for network information security.

[0048] Compared with the prior art, the present invention has achieved the following beneficial effects:

[0049] By obtaining user network information of users in the network and network node information of the network structure, a first network security evaluation mechanism for the network is established based on the user network information, and a second network security evaluation mechanism for the network is established based on the network node information. The evaluation mechanism is established from the user aspect and the network node aspect, and the first network security evaluation mechanism and the second network security evaluation mechanism are integrated to obtain a target network security evaluation mechanism, ensuring the comprehensiveness and accuracy of the target network security evaluation mechanism, inputting the real-time network collected data into the target network security evaluation mechanism, obtaining a dynamic evaluation coefficient for network information security, improving the evaluation accuracy, and ensuring network security.

[0050] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures specifically pointed out in this application document.

[0051] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0053] Figure 1 A structural diagram of a dynamic evaluation system for network information security in an embodiment of the present invention;

[0054] Figure 2 is a structural diagram of the information acquisition module described in an embodiment of the present invention;

[0055] Figure 3 The present invention is a flowchart of a method for dynamically evaluating network information security in an embodiment of the present invention. DETAILED DESCRIPTION

[0056] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0057] Embodiment 1:

[0058] The embodiment of the present invention provides a dynamic evaluation system for network information security. Figure 1 As shown, including:

[0059] An information acquisition module is used to acquire user network information of users in the network and network node information of the network structure;

[0060] A mechanism establishment module, used to establish a first network security evaluation mechanism for the network based on user network information, and to establish a second network security evaluation mechanism for the network based on network node information;

[0061] A mechanism fusion module, used to fuse the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a target network security evaluation mechanism;

[0062] The security evaluation module is used to input the real-time network collected data into the target network security evaluation mechanism to obtain a dynamic evaluation coefficient for network information security.

[0063] In this embodiment, the network user information includes login information and operation information.

[0064] In this embodiment, the network node information includes basic node information such as network architecture characteristics, deployment status characteristics, application characteristics, and system configuration characteristics, as well as node dynamic information.

[0065] In this embodiment, the first network security evaluation mechanism performs security evaluation from the user perspective, and the second network security evaluation mechanism performs evaluation from the network node perspective.

[0066] The beneficial effects of the above design scheme are: by obtaining the user network information of the user in the network, obtaining the network node information of the network structure, based on the user network information, a first network security evaluation mechanism for the network is established, based on the network node information, a second network security evaluation mechanism for the network is established, the evaluation mechanism is established from the user aspect and the network node aspect, the first network security evaluation mechanism and the second network security evaluation mechanism are integrated to obtain a target network security evaluation mechanism, the comprehensiveness and accuracy of the target network security evaluation mechanism are ensured, the real-time network collection data is input into the target network security evaluation mechanism, and a dynamic evaluation coefficient for network information security is obtained, thereby improving the evaluation accuracy and ensuring network security.

[0067] Embodiment 2:

[0068] Based on Example 1, the embodiment of the present invention provides a dynamic evaluation system for network information security, wherein the information acquisition module includes:

[0069] A login information acquisition unit, used to acquire the login information of the user in the network, and integrate the login information according to the user identity and login time to obtain the target login information;

[0070] An operation information acquisition unit, used to acquire the user's operation information in the network, and integrate the operation information according to the operation type and operation time to obtain target operation information;

[0071] The associating unit is used to associate the target login information with the target operation information, and obtain the user network information based on the association result.

[0072] The beneficial effects of the above design scheme are: by obtaining the user's login information in the network, and integrating the login information according to the user identity and login time, the target login information is obtained; the user's operation information in the network is obtained, and the operation information is integrated according to the operation type and operation time to obtain the target operation information; the target login information and the target operation information are associated, and the user network information is obtained based on the association result, so as to ensure the comprehensiveness and relevance of the obtained user network information, and provide an information basis for network information security assessment.

[0073] Embodiment 3:

[0074] Based on Example 1, the present invention provides a dynamic evaluation system for network information security. Figure 2 As shown, the information acquisition module further includes:

[0075] A feature acquisition unit, used to acquire network architecture features, deployment situation features, application features and system configuration features from the network structure;

[0076] A basic information acquisition unit, used to obtain basic node information of each network node in the network structure based on network architecture characteristics, deployment situation characteristics, application characteristics and system configuration characteristics;

[0077] A dynamic information acquisition unit, used to collect dynamic operation data of network nodes and use the dynamic operation data as node dynamic information;

[0078] The information storage unit is used to store the node basic information and node dynamic information to obtain network node information.

[0079] The beneficial effects of the above design scheme are: by acquiring network architecture characteristics, deployment status characteristics, application characteristics and system configuration characteristics from the network structure, the node basic information of each network node in the network structure is obtained based on the network architecture characteristics, deployment status characteristics, application characteristics and system configuration characteristics, the dynamic operation data of the network nodes is collected, the dynamic operation data is used as the node dynamic information, the node basic information and the node dynamic information are stored to obtain network node information, the network node information is obtained from both static and dynamic aspects, and an information basis is provided for the dynamic evaluation of network information security.

[0080] Embodiment 4:

[0081] Based on Example 1, the embodiment of the present invention provides a dynamic evaluation system for network information security, wherein the mechanism establishment module includes:

[0082] A parameter determination unit, used to establish evaluation parameters for users based on historical user network security issues, and to establish an evaluation parameter structure diagram based on associations between the evaluation parameters;

[0083] The first mechanism determination unit is used to establish a first network security evaluation mechanism that satisfies the evaluation parameter structure diagram based on an evaluation tool.

[0084] The beneficial effects of the above design scheme are: by establishing evaluation parameters for users based on historical user network security issues, and establishing an evaluation parameter structure diagram based on the relationship between the evaluation parameters, a first network security evaluation mechanism that satisfies the evaluation parameter structure diagram is established based on the evaluation tool, and a first network security evaluation mechanism is established from the user's perspective to ensure the accuracy of the network security evaluation based on the user.

[0085] Embodiment 5:

[0086] Based on Example 1, the embodiment of the present invention provides a dynamic evaluation system for network information security, wherein the mechanism establishment module further includes:

[0087] An indicator determination unit, used to determine evaluation indicators for network nodes and indicator weights of the evaluation indicators based on historical security issues of the network nodes;

[0088] A method determination unit, used for obtaining relevant node information associated with the evaluation index from the network node information, inputting the relevant node information into the network operation hierarchical model to determine the network layer where the relevant node information is located, and determining the evaluation method for the network node information at the network layer based on the layer structure characteristics of the network layer in all network layers;

[0089] A layer weighted processing unit, for integrating and sorting the evaluation methods of all network layers where the network node information is located based on the hierarchical characteristics between all network layers where the network node information is located, to obtain an evaluation method sequence for the network node information, and for weighting the evaluation method sequence based on the layer weight of the network layer where the network node information is located, to obtain an evaluation method weighted sequence;

[0090] An indicator weighting processing unit, used to establish an evaluation method weighting matrix of all evaluation indicators based on the evaluation method weighting sequence, and perform secondary weighting on the evaluation method weighting matrix based on the indicator weights of the evaluation indicators to obtain a target evaluation method weighting matrix;

[0091] The second mechanism determination unit is used to establish a weighted evaluation standard matrix corresponding to the target evaluation method weighted matrix, and to establish a second network security evaluation mechanism that satisfies the weighted evaluation standard matrix based on an evaluation tool.

[0092] In this embodiment, the network operation hierarchical model is pre-designed and includes multiple network layers. Adjacent network layers are interconnected, and the operation of the network is realized through the network layers.

[0093] In this embodiment, the evaluation method includes, for example, numerical comparison, area comparison, program checking, etc.

[0094] The beneficial effects of the above design scheme are as follows: by determining the evaluation index of the network node and the index weight of the evaluation index based on the historical security issues of the network node, obtaining the relevant node information associated with the evaluation index from the network node information, inputting the relevant node information into the network operation hierarchical model to determine the network layer where the relevant node information is located, and determining the evaluation method of the network node information in the network layer based on the layer structure characteristics of the network layer in all network layers; based on the hierarchical characteristics between all network layers where the network node information is located, integrating and sorting the evaluation methods of all network layers to obtain the evaluation method sequence of the network node information. Column, and based on the layer weight of the network layer, the evaluation method sequence is weighted to obtain an evaluation method weighted sequence; based on the evaluation method weighted sequence, an evaluation method weighted matrix of all evaluation indicators is established, and based on the indicator weights of the evaluation indicators, the evaluation method weighted matrix is ​​weighted twice to obtain a target evaluation method weighted matrix; a weighted evaluation standard matrix corresponding to the target evaluation method weighted matrix is ​​established, and a second network security evaluation mechanism that satisfies the weighted evaluation standard matrix is ​​established based on the evaluation tool; a second network security evaluation mechanism is established from the perspective of network nodes to ensure the accuracy of network security evaluation starting from network nodes.

[0095] Embodiment 6:

[0096] Based on Example 1, the embodiment of the present invention provides a dynamic evaluation system for network information security, wherein the mechanism fusion module includes:

[0097] A vulnerability determination unit, used to obtain all evaluation indicators in the first network security evaluation mechanism and the second network security evaluation mechanism, and determine the security vulnerabilities to be analyzed of network information security based on all evaluation indicators and in combination with the indicator-vulnerability relationship database;

[0098] A content selection unit, used to obtain relevant indicators corresponding to the security vulnerabilities to be analyzed from the indicator-vulnerability relationship database, and obtain mechanism contents related to the relevant indicators from the first network security evaluation mechanism and the second network security evaluation mechanism;

[0099] A rule determination unit, configured to determine a first fusion rule for the first network security evaluation mechanism and the second network security evaluation mechanism based on the evaluation levels of the mechanism content in the first network security evaluation mechanism and the second network security evaluation mechanism;

[0100] The rule determination unit is further used to perform a resource occupation test on the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a resource occupation score corresponding to each evaluation level, and establish a second fusion rule of the first network security evaluation mechanism and the second network security evaluation mechanism based on the resource occupation score;

[0101] A scheme determining unit, configured to determine a fusion scheme for a first network security evaluation mechanism and a second network security evaluation mechanism based on the first fusion rule;

[0102] A scheme selection unit, configured to perform operation evaluation on the plurality of mechanism fusion schemes based on the second fusion rule to obtain a target mechanism fusion scheme with the highest operation efficiency;

[0103] The fusion unit is used to fuse the first network security evaluation mechanism and the second network security evaluation mechanism according to the target mechanism fusion scheme to obtain a target network security evaluation mechanism.

[0104] In this embodiment, the first fusion rule focuses on the fusion of the evaluation mechanism content, and the second fusion rule focuses on the resource ratio during the fusion and after-fusion mechanism operation.

[0105] The beneficial effects of the above design scheme are: by obtaining relevant indicators corresponding to the security vulnerabilities to be analyzed from the indicator-vulnerability relationship database, and obtaining mechanism contents related to the relevant indicators from the first network security evaluation mechanism and the second network security evaluation mechanism;

[0106] A rule determination unit is used to determine a first fusion rule for the first network security evaluation mechanism and the second network security evaluation mechanism based on the evaluation level of the mechanism content in the first network security evaluation mechanism and the second network security evaluation mechanism; to perform a resource occupancy test on the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a resource occupancy score corresponding to each evaluation level, and to establish a second fusion rule for the first network security evaluation mechanism and the second network security evaluation mechanism based on the resource occupancy score; based on the first fusion rule, determine a plurality of mechanism fusion schemes for the first network security evaluation mechanism and the second network security evaluation mechanism; based on the second fusion rule, perform an operation evaluation on the plurality of mechanism fusion schemes to obtain a target mechanism fusion scheme with the highest operation efficiency; perform mechanism fusion on the first network security evaluation mechanism and the second network security evaluation mechanism according to the target mechanism fusion scheme to obtain a target network security evaluation mechanism, thereby ensuring the comprehensiveness and accuracy of the obtained target network security evaluation mechanism, providing high evaluation accuracy, and ensuring network security.

[0107] Embodiment 7:

[0108] Based on Example 6, the embodiment of the present invention provides a dynamic evaluation system for network information security, wherein the solution selection unit includes:

[0109] A scoring unit, configured to perform an operation evaluation on the multiple mechanism fusion scheme based on the second fusion rule to obtain a comprehensive resource score;

[0110] The selection unit is used to select the mechanism fusion scheme with the highest comprehensive resource score as the target mechanism fusion scheme with the highest operating efficiency.

[0111] The beneficial effect of the above design scheme is: by performing operation evaluation on the multiple mechanism fusion schemes based on the second fusion rule, a comprehensive resource score is obtained, and the mechanism fusion scheme with the highest comprehensive resource score is selected as the target mechanism fusion scheme with the highest operation efficiency, thereby ensuring the operation efficiency of the target mechanism fusion scheme and improving the fusion efficiency.

[0112] Embodiment 8:

[0113] Based on Example 1, the embodiment of the present invention provides a dynamic evaluation system for network information security, wherein the security evaluation module includes:

[0114] A classification unit, used to obtain a data type input rule of a target network security assessment mechanism, and classify the network real-time collected data according to the data type input rule to obtain category collected data;

[0115] The evaluation unit is used to input the category collected data into the target network security evaluation mechanism according to the data type input rule to obtain a dynamic evaluation coefficient for network information security.

[0116] The above design scheme has the following effects: by obtaining the data type input rules of the target network security assessment mechanism, and dividing and classifying the real-time network collected data according to the data type input rules, obtaining category collected data, and inputting the category collected data into the target network security assessment mechanism according to the data type input rules, obtaining a dynamic evaluation coefficient for network information security, providing high assessment accuracy, and ensuring network security.

[0117] Embodiment 9:

[0118] Based on Example 1, the embodiment of the present invention provides a dynamic evaluation system for network information security, further comprising a policy determination module for determining a network information maintenance policy related to the dynamic evaluation coefficient based on the dynamic evaluation coefficient of network information security.

[0119] The beneficial effect of the above design scheme is: by determining a network information maintenance strategy related to the dynamic evaluation coefficient based on the dynamic evaluation coefficient of network information security, the network information security is guaranteed.

[0120] Embodiment 10:

[0121] Based on Example 1, the present invention provides an evaluation method for a dynamic evaluation system of network information security, such as Figure 3 As shown, including:

[0122] S1: Obtain user network information of the user in the network and obtain network node information of the network structure;

[0123] S2: Based on the user network information, a first network security evaluation mechanism for the network is established, and based on the network node information, a second network security evaluation mechanism for the network is established;

[0124] S3: integrating the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a target network security evaluation mechanism;

[0125] S4: Input the real-time network collected data into the target network security assessment mechanism to obtain a dynamic evaluation coefficient for network information security.

[0126] In this embodiment, the network user information includes login information and operation information.

[0127] In this embodiment, the network node information includes basic node information such as network architecture characteristics, deployment status characteristics, application characteristics, and system configuration characteristics, as well as node dynamic information.

[0128] In this embodiment, the first network security evaluation mechanism performs security evaluation from the user perspective, and the second network security evaluation mechanism performs evaluation from the network node perspective.

[0129] The beneficial effects of the above design scheme are: by obtaining the user network information of the user in the network, obtaining the network node information of the network structure, based on the user network information, a first network security evaluation mechanism for the network is established, based on the network node information, a second network security evaluation mechanism for the network is established, the evaluation mechanism is established from the user aspect and the network node aspect, the first network security evaluation mechanism and the second network security evaluation mechanism are integrated to obtain a target network security evaluation mechanism, the comprehensiveness and accuracy of the target network security evaluation mechanism are ensured, the real-time network collection data is input into the target network security evaluation mechanism, and a dynamic evaluation coefficient for network information security is obtained, thereby improving the evaluation accuracy and ensuring network security.

[0130] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention belong to the scope of this application document and its equivalent technology, the present invention is also intended to include these changes and variations.

Claims

1. A dynamic evaluation system for network information security, characterized in that: include: An information acquisition module is used to acquire user network information of users in the network and network node information of the network structure; A mechanism establishment module, used to establish a first network security evaluation mechanism for the network based on user network information, and to establish a second network security evaluation mechanism for the network based on network node information; A mechanism fusion module, used to fuse the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a target network security evaluation mechanism; A security evaluation module is used to input the real-time network collection data into the target network security evaluation mechanism to obtain a dynamic evaluation coefficient for network information security; The mechanism fusion module includes: A vulnerability determination unit, used to obtain all evaluation indicators in the first network security evaluation mechanism and the second network security evaluation mechanism, and determine the security vulnerabilities to be analyzed of network information security based on all evaluation indicators and in combination with the indicator-vulnerability relationship database; A content selection unit, used to obtain relevant indicators corresponding to the security vulnerabilities to be analyzed from the indicator-vulnerability relationship database, and obtain mechanism contents corresponding to the relevant indicators from the first network security evaluation mechanism and the second network security evaluation mechanism; A rule determination unit, configured to determine a first fusion rule for the first network security evaluation mechanism and the second network security evaluation mechanism based on the evaluation levels of the mechanism content in the first network security evaluation mechanism and the second network security evaluation mechanism; The rule determination unit is further used to perform a resource occupation test on the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a resource occupation score corresponding to each evaluation level, and establish a second fusion rule of the first network security evaluation mechanism and the second network security evaluation mechanism based on the resource occupation score; A scheme determining unit, configured to determine a fusion scheme for a first network security evaluation mechanism and a second network security evaluation mechanism based on the first fusion rule; A scheme selection unit, configured to perform operation evaluation on the plurality of mechanism fusion schemes based on the second fusion rule to obtain a target mechanism fusion scheme with the highest operation efficiency; The fusion unit is used to fuse the first network security evaluation mechanism and the second network security evaluation mechanism according to the target mechanism fusion scheme to obtain a target network security evaluation mechanism.

2. A dynamic evaluation system for network information security according to claim 1, characterized in that: The information acquisition module comprises: A login information acquisition unit, used to acquire the login information of the user in the network, and integrate the login information according to the user identity and login time to obtain the target login information; An operation information acquisition unit, used to acquire the user's operation information in the network, and integrate the operation information according to the operation type and operation time to obtain target operation information; The associating unit is used to associate the target login information with the target operation information, and obtain the user network information based on the association result.

3. A dynamic evaluation system for network information security according to claim 1, characterized in that: The information acquisition module further includes: A feature acquisition unit, used to acquire network architecture features, deployment situation features, application features and system configuration features from the network structure; A basic information acquisition unit, used to obtain basic node information of each network node in the network structure based on network architecture characteristics, deployment situation characteristics, application characteristics and system configuration characteristics; A dynamic information acquisition unit, used to collect dynamic operation data of network nodes and use the dynamic operation data as node dynamic information; The information storage unit is used to store the node basic information and node dynamic information to obtain network node information.

4. According to the dynamic evaluation system for network information security of claim 1, the mechanism establishment module comprises: A parameter determination unit, used to establish evaluation parameters for users based on historical user network security issues, and to establish an evaluation parameter structure diagram based on associations between the evaluation parameters; The first mechanism determination unit is used to establish a first network security evaluation mechanism that satisfies the evaluation parameter structure diagram based on an evaluation tool.

5. According to the dynamic evaluation system for network information security of claim 1, the mechanism establishment module further comprises: An indicator determination unit, used to determine evaluation indicators for network nodes and indicator weights of the evaluation indicators based on historical security issues of the network nodes; A method determination unit, used for obtaining relevant node information associated with the evaluation index from the network node information, inputting the relevant node information into the network operation hierarchical model to determine the network layer where the relevant node information is located, and determining the evaluation method for the network node information at the network layer based on the layer structure characteristics of the network layer in all network layers; A layer weighted processing unit, for integrating and sorting the evaluation methods of all network layers where the network node information is located based on the hierarchical characteristics between all network layers where the network node information is located, to obtain an evaluation method sequence for the network node information, and for weighting the evaluation method sequence based on the layer weight of the network layer where the network node information is located, to obtain an evaluation method weighted sequence; An indicator weighting processing unit, used to establish an evaluation method weighting matrix of all evaluation indicators based on the evaluation method weighting sequence, and perform secondary weighting on the evaluation method weighting matrix based on the indicator weights of the evaluation indicators to obtain a target evaluation method weighting matrix; The second mechanism determination unit is used to establish a weighted evaluation standard matrix corresponding to the target evaluation method weighted matrix, and to establish a second network security evaluation mechanism that satisfies the weighted evaluation standard matrix based on an evaluation tool.

6. A dynamic evaluation system for network information security according to claim 1, characterized in that: The scheme selection unit includes: A scoring unit, configured to perform an operation evaluation on the multiple mechanism fusion scheme based on the second fusion rule to obtain a comprehensive resource score; The selection unit is used to select the mechanism fusion scheme with the highest comprehensive resource score as the target mechanism fusion scheme with the highest operating efficiency.

7. A dynamic evaluation system for network information security according to claim 1, characterized in that: The safety evaluation module comprises: A classification unit, used to obtain a data type input rule of a target network security evaluation mechanism, and classify the network real-time collected data according to the data type input rule to obtain category collected data; The evaluation unit is used to input the category collected data into the target network security evaluation mechanism according to the data type input rule to obtain a dynamic evaluation coefficient for network information security.

8. A dynamic evaluation system for network information security according to claim 1, characterized in that: It also includes a policy determination module, which is used to determine a network information maintenance policy related to the dynamic evaluation coefficient based on the dynamic evaluation coefficient of network information security.

9. The evaluation method of a dynamic evaluation system for network information security according to claim 1, characterized in that: include: S1: Obtain user network information of the user in the network and obtain network node information of the network structure; S2: Based on the user network information, a first network security evaluation mechanism for the network is established, and based on the network node information, a second network security evaluation mechanism for the network is established; S3: integrating the first network security evaluation mechanism and the second network security evaluation mechanism to obtain a target network security evaluation mechanism; S4: Input the real-time network collected data into the target network security evaluation mechanism to obtain a dynamic evaluation coefficient for network information security.

Images