User information security protection degree analysis method and device in consumption system

Abstract

The invention discloses a user information security protection degree analysis method and device in a consumption system, which can be used in the technical field of information security, and the method comprises the following steps: extracting user related fields; according to the display condition of the front-end interface, analyzing whether the user related field is a risk field or not; performing statistics on interaction flow data containing risk fields, and constructing a user information threat model and a threat analysis table corresponding to each interaction flow data of each function point of the user information threat model, the threat analysis table comprising user information security protection measures; when a user interacts with the consumption system, determining a risk level of each risk field in real-time interaction flow data; and inputting real-time interaction flow data into the user information threat model, obtaining the proportion of each risk level for implementing each user information security protection measure, and finally determining the implementation proportion of the consumption system for each user information security protection measure. According to the invention, the customer information security protection degree in the consumption system can be effectively analyzed.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a method and device for analyzing the security protection degree of user information in a consumer system. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the invention recited in the claims. No admission is made that the description herein is prior art by inclusion in this section.

[0003] As the digital economy continues to deepen, the importance of personal customer information security has become increasingly prominent, and personal information protection is urgent. Due to the diversity and complexity of customer data, although there are basic personal customer information protection designs, there is still a lack of effective risk identification methods and tools, a lack of refined control over the security of personal customer information data, and a lack of handles for evaluating specific personal customer information data risk control measures, making it difficult to quantify personal customer information data risks.

[0004] The consumption system is a system frequently used by individual customers and merchants, involving a large number of transactions, so the protection of personal information is particularly important. However, there is currently no unified solution to analyze whether the existing consumption system protects customer information security and to what extent. Consumers and managers cannot evaluate the security of each consumption system, and then doubt the security of transactions. Therefore, there is a need for an effective solution that can effectively analyze the degree of security protection of customer information in the consumption system to fully ensure the safety of customers using the consumption system, thereby improving the user experience of using the consumption system. Summary of the invention

[0005] The embodiment of the present invention provides a method for analyzing the security protection degree of user information in a consumption system, which is used to effectively analyze the security protection degree of customer information in the consumption system, so as to fully ensure the security of customers using the consumption system and improve the user experience of using the consumption system. The method includes:

[0006] Extract the form in the consumption system, analyze the form, and extract user-related fields;

[0007] Analyze whether the user-related fields are risk fields based on the display of the values ​​of the user-related fields on the front-end interface of the consumption system;

[0008] Collect statistics on the interaction flow data containing risk fields of all front-end interfaces of the consumption system;

[0009] According to the interaction flow data, a user information threat model is constructed, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point of the front-end page of the consumption system, and the threat analysis table includes user information security protection measures;

[0010] When users interact with the consumption system, obtain real-time interaction flow data between the users and the consumption system;

[0011] According to the preset risk level classification conditions, determine the risk level of each risk field in the real-time interactive flow data;

[0012] Input the real-time interaction flow data into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level;

[0013] According to the proportion of each user information security protection measure implemented at all risk levels, the implementation ratio of each user information security protection measure in the consumer system is determined, and the implementation ratio is used as the protection ratio of the user information security protection level in the consumer system.

[0014] The embodiment of the present invention also provides a user information security protection degree analysis device in a consumption system, which is used to effectively analyze the customer information security protection degree in the consumption system, so as to fully ensure the safety of the customer's use of the consumption system and improve the user's experience of using the consumption system. The device includes:

[0015] Field extraction module, used to extract forms from the consumption system, analyze the forms, and extract user-related fields;

[0016] The risk field analysis module is used to analyze whether the user-related fields are risk fields based on the display of the values ​​of the user-related fields on the front-end interface of the consumption system;

[0017] The interactive flow data statistics module is used to count the interactive flow data containing risk fields of all front-end interfaces of the consumer system;

[0018] A user information threat model construction module, used to construct a user information threat model according to the interaction flow data, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point of the front-end page of the consumption system, and the threat analysis table includes user information security protection measures;

[0019] An interactive flow data acquisition module is used to obtain real-time interactive flow data between the user and the consumption system when the user interacts with the consumption system;

[0020] The risk level classification module is used to determine the risk level of each risk field in the real-time interactive flow data according to the preset risk level classification conditions;

[0021] An implementation analysis module is used to input real-time interaction flow data into a user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level; based on the proportion of each user information security protection measure implemented at all risk levels, the implementation proportion of each user information security protection measure in the consumer system is determined, and the implementation proportion is used as the protection proportion of the user information security protection level in the consumer system.

[0022] An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned method for analyzing the degree of security protection of user information in the consumer system when executing the computer program.

[0023] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for analyzing the degree of security protection of user information in the above-mentioned consumer system is implemented.

[0024] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the method for analyzing the degree of security protection of user information in the consumption system is implemented.

[0025] In an embodiment of the present invention, a form in a consumption system is extracted, the form is analyzed, and user-related fields are extracted; whether the user-related fields are risk fields is analyzed according to the display of the values ​​of the user-related fields on the front-end interface of the consumption system; the interactive flow data containing risk fields of all front-end interfaces of the consumption system are counted; a user information threat model is constructed according to the interactive flow data, and the user information threat model includes a threat analysis table corresponding to each interactive flow data of each functional point of the front-end page of the consumption system, and the threat analysis table includes user information security protection measures; when a user interacts with the consumption system, real-time interactive flow data between the user and the consumption system is obtained; according to a preset risk level classification condition, the risk level of each risk field in the real-time interactive flow data is determined; the real-time interactive flow data is input into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level; according to the proportion of each user information security protection measure implemented at all risk levels, the implementation ratio of each user information security protection measure in the consumption system is determined, and the implementation ratio is used as the protection ratio of the user information security protection degree in the consumption system. Through the above steps, the degree of customer information security protection in the consumption system can be effectively analyzed, wherein, by extracting forms, analyzing to obtain risk fields, and counting interaction flow data, a threat model for user information can be constructed. The user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point of the front-end page of the consumption system. In this way, after the subsequent table obtains real-time interaction flow data, the implementation ratio of each user information security protection measure in the consumption system can be analyzed, that is, the protection ratio of the user information security protection degree can be analyzed, so that subsequent developers can perform security upgrades and improvements to the consumption system. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0027] Figure 1 Flow chart of a method for analyzing the degree of security protection of user information in a consumption system in an embodiment of the present invention;

[0028] Figure 2 An example of an interactive scene graph constructed in an embodiment of the present invention;

[0029] Figure 3 Schematic diagram of the overall data flow diagram in an embodiment of the present invention;

[0030] Figure 4A data flow diagram corresponding to a registration function point in an embodiment of the present invention;

[0031] Figure 5 , Figure 6 and Figure 7 Three data flow diagrams corresponding to the login function points in the embodiment of the present invention;

[0032] Figure 8 It is a data flow diagram corresponding to the login function point in the embodiment of the present invention;

[0033] Fig. 9 A flowchart of the entropy weight method for assigning weights in an embodiment of the present invention;

[0034] Fig.10 It is a structural schematic diagram of a device for analyzing the degree of security protection of user information in a consumption system in an embodiment of the present invention;

[0035] Fig.11 Schematic diagram of a computer device in an embodiment of the present invention. DETAILED DESCRIPTION

[0036] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0037] The acquisition, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0038] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0039] Figure 1 The flowchart of the method for analyzing the security protection degree of user information in a consumption system in an embodiment of the present invention includes:

[0040] Step 101, extracting a form in the consumption system, analyzing the form, and extracting user-related fields;

[0041] Step 102, analyzing whether the user-related field is a risk field according to the display of the value of the user-related field on the front-end interface of the consumption system;

[0042] Step 103, collecting statistics on the interaction flow data containing risk fields of all front-end interfaces of the consumption system;

[0043] Step 104: construct a user information threat model based on the interaction flow data, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point on the front-end page of the consumer system, and the threat analysis table includes user information security protection measures;

[0044] Step 105, when the user interacts with the consumption system, obtaining real-time interaction flow data between the user and the consumption system;

[0045] Step 106, determining the risk level of each risk field in the real-time interactive flow data according to the preset risk level classification condition;

[0046] Step 107, input the real-time interaction flow data into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level;

[0047] Step 108, determining the implementation ratio of each user information security protection measure in the consumer system according to the ratio of each user information security protection measure implemented at all risk levels, and using the implementation ratio as the protection ratio of the user information security protection level in the consumer system.

[0048] In the embodiment of the present invention, the degree of customer information security protection in the consumption system can be effectively analyzed, wherein the form is extracted, the risk field is analyzed, and the interactive flow data is counted, and a threat model for user information can be constructed. The user information threat model includes a threat analysis table corresponding to each interactive flow data of each functional point of the front-end page of the consumption system, so that after the subsequent table obtains real-time interactive flow data, the implementation ratio of each user information security protection measure of the consumption system can be analyzed, that is, the protection ratio of the degree of user information security protection can be analyzed, so that subsequent developers can perform security upgrades and improvements on the consumption system. Each step is described in detail below.

[0049] In step 101, a form in the consumption system is extracted, the form is analyzed, and user-related fields are extracted;

[0050] The consumption system is a system used by users to shop, including application version, web version, etc. The form is a data form involved in the consumption system, which can be a form in the database used by the consumption system. It contains fields related to user interaction.

[0051] The users include consumer users, merchant users and administrator users of the consumption system;

[0052] The user-related fields include user information fields and transaction fields; for example, the user information fields of consumer users include mobile phone number, name, ID number, credit card number, and password; the user information fields of merchant users include shopping mall name, legal person certificate type, legal person certificate number, legal person type, legal representative name, and legal representative certificate number.

[0053] The transaction fields include transaction amount, etc.

[0054] In the embodiment of the present invention, only user-related fields are extracted from the form, and commodity information and the like do not need to be extracted.

[0055] In step 102, based on the display of the values ​​of the user-related fields on the front-end interface of the consumption system, it is analyzed whether the user-related fields are risk fields;

[0056] The front-end interface includes a consumer user display interface, a merchant display interface and an administrator user display interface;

[0057] In one embodiment, analyzing whether the user-related field is a risk field according to the display of the value of the user-related field on the front-end interface of the consumption system includes:

[0058] If the value of the user-related field cannot be displayed on the front-end interface of the consumption system, the user-related field is determined to be a risk field;

[0059] If the value of the user-related field can be displayed on the front-end interface of the consumption system, but only partial information of the value of the user-related field is displayed, it is determined that the user-related field is a risk field.

[0060] Among them, only part of the information of the value of the user-related field is displayed, such as hiding the middle digits in the mobile phone number. In general, some information related to the merchant name in the user-related fields is public information and does not need to be assessed for information data security risks. However, some information such as mobile phone number, ID number, account password, and transaction information requires customer information data security risk assessment, so the corresponding fields are risk fields.

[0061] In step 103, the interaction flow data including the risk field of all front-end interfaces of the consumption system are counted;

[0062] The interactive flow data includes a user input data field and a front-end page display data field.

[0063] In step 104, a user information threat model is constructed based on the interaction flow data, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point of the front-end page of the consumer system, and the threat analysis table includes user information security protection measures;

[0064] In one embodiment, constructing a user information threat model based on the interaction flow data includes:

[0065] According to the interaction flow data, an interaction scene graph is constructed, and according to the corresponding function points and the interaction scene graph of the front-end page of the consumption system, a data flow graph of each function point is constructed;

[0066] According to the corresponding function points and interaction scenario diagrams of the front-end page of the consumer system, a data flow diagram for each function point is constructed;

[0067] According to all data flow diagrams, a user information threat model is constructed, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point, and the threat analysis table includes user information security protection measures.

[0068] In one embodiment, constructing an interaction scene graph according to the interaction flow data includes:

[0069] Determine that the external entity is a consumption system, a user, and an associated system of the consumption system, wherein the associated system is a system with which a value of a risk field flows with the consumption system;

[0070] Determine each interactive flow data and corresponding data flow direction between external entities according to the interactive flow data; wherein the consumer system and each external entity have at least one interactive flow data in the same data flow direction;

[0071] Based on each interaction flow data between the consumer system and the external entity, the trust boundary is determined to form an interaction scenario graph.

[0072] Specifically, the associated system can be the data of the consumption system. Figure 2 This is an example of an interactive scene graph constructed in an embodiment of the present invention. Its external entities include consumer users, unit users (i.e., merchant users), and administrator users. The dotted line represents the trust boundary. Data flows from the low-trust area to the high-trust area. The arrows represent the data flow direction. The rounded rectangle contains the interactive flow data.

[0073] In one embodiment, a data flow diagram for each function point is constructed based on the corresponding function point and interaction scene diagram of the front-end page of the consumption system, including:

[0074] From the interaction scenario diagram, identify the users involved in each functional point;

[0075] For each function point, a data flow graph of the function point is constructed based on each user involved in the function point and each interaction flow data of each user.

[0076] Specifically, Figure 3 is a schematic diagram of the overall data flow diagram in an embodiment of the present invention, corresponding to Figure 2, encode each user, register, log in, and real-name authentication as function points, and then build a data flow graph for each function point, Figure 4 This is a data flow diagram corresponding to the registration function point in the embodiment of the present invention, with the node "registration" as the center and other nodes as users. Registration involves merchant users and consumer users. There is only one situation for each type of user when registering. Then there is one kind of interactive flow data from the node "user" to the node "registration". The interactive flow data can be called the consumer user sending registration information. Figure 5-Figure 7 The three data flow diagrams corresponding to the login function point in the embodiment of the present invention are centered on the node "login" and other nodes are users. When users log in, they can use different methods, thus forming different interactive flow data. For example, Figure 5 The interactive flow data is the mobile phone and SMS verification code. Figure 6 The interactive flow data includes mobile phone number, account password and picture verification code. Figure 7 The interactive flow data includes user name / unified social credit code, account password and picture verification code. Figure 8 This is a data flow diagram corresponding to the login function point in an embodiment of the present invention, and the interactive flow data is name, ID number, bank card number and reserved mobile phone number.

[0077] In one embodiment, a user information threat model is constructed based on all data flow diagrams, including:

[0078] For each interactive flow data of each functional point in each data flow diagram, a threat analysis table is formed;

[0079] Determine the user information threat type in each threat analysis table and the user information security protection measures corresponding to each user information threat type.

[0080] Table 1 is a threat analysis table corresponding to the interactive flow data of the registration information sent by the consumer user of the registration function point in the embodiment of the present invention. The threat analysis table also includes the element name (name of the interactive flow data, with a number added), element overview (which can be obtained by semantic analysis of the element name, used to describe the content and purpose of the element name), risk level of each threat type, risk description, and user information security protection measures. The threat type, risk level and risk description in the threat model are pre-set after considering the user information security assessment, and the user information security protection measures are determined according to the characteristics and security requirements of the consumer system. The threat types include tampering, information leakage, and denial of service. Tampering refers to unauthorized modification of data, information leakage refers to unauthorized access to sensitive information, and denial of service refers to preventing legitimate users from accessing by overloading the consumer system.

[0081] Table 1

[0082]

[0083]

[0084] Table 2 is a threat analysis table corresponding to the interaction flow data of the merchant user sending the registration information of the registration function point in the embodiment of the present invention. The meaning of Table 2 is similar to that of Table 1 and will not be explained here.

[0085] Table 2

[0086]

[0087]

[0088] In step 105, when the user interacts with the consumption system, real-time interaction flow data between the user and the consumption system is obtained;

[0089] The above steps provide the steps for constructing the threat model. Starting from step 105, the calculation process of obtaining real-time interaction flow data for the actual user to interact with the consumption system is carried out.

[0090] In step 106, the risk level of each risk field in the real-time interactive flow data is determined according to the preset risk level classification condition;

[0091] Specifically, the preset risk level classification conditions can be determined according to actual conditions. In the embodiment of the present invention, the positioning related to movement trajectory, communication content, and property information is defined as level three, the positioning related to accommodation information, communication records, health and physiological information, and transaction information is defined as level two, and other information related to personal information is defined as level one.

[0092] The risk level of each risk field is implemented using the list derivation structure Labeled_data in Python, where the interactive flow data is represented by the data list Data, and the risk level is represented by the level list Levels. The list derivation structure Labeled_data is used to correspond the interactive flow data to the risk level one by one. The specific representation is as follows:

[0093] Data = [ID, mobile phone number, bank card number, password]

[0094] Levels = [Level 1, Level 2, Level 3]

[0095] Labeled_data = [(ID, first level), (mobile phone number, first level), (bank card number, first level), (password, first level)]

[0096] In step 107, the real-time interaction flow data is input into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level;

[0097] In one embodiment, the real-time interaction flow data is input into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level, including:

[0098] Count the risk fields of the same risk level in the interaction flow data;

[0099] According to the statistical implementation of each user information security protection measure in all threat analysis diagrams for each risk field of the same risk level, calculate the proportion of each user information security protection measure implemented for the risk field;

[0100] The average ratio of each user information security protection measure implemented for all risk fields of the same risk level is calculated to obtain the ratio of each user information security protection measure implemented for each risk level.

[0101] For example, when the risk field with the risk level of level 1 only has ID and password, the implementation of HTTPS in the transmission channel of the ID in all threat analysis diagrams is counted. If the ID is used in 5 places in the consumer system, but only 4 places implement HTTPS in the transmission channel, then the proportion of HTTPS in the ID implementation transmission channel is 4 / 5=0.8;

[0102] Correspondingly, if the password is used in 4 places in the consumer system, but only 3 places implement the transmission channel using HTTPS, then the proportion of password implementation transmission channel using HTTPS is 3 / 4 = 0.75;

[0103] Then, when the risk level is level one, the proportion of HTTPS used in the transmission channel is (0.8+0.75) / 2=0.775.

[0104] Specifically, the proportion of all user information security protection measures implemented can be counted through a two-dimensional table corresponding to Table 3.

[0105] Table 3

[0106]

[0107] In step 108, the implementation ratio of each user information security protection measure in the consumer system is determined according to the ratio of each user information security protection measure implemented at all risk levels, and the implementation ratio is used as the protection ratio of the user information security protection level in the consumer system.

[0108] In one embodiment, the implementation ratio of each user information security protection measure by the consumer system is determined according to the ratio of each user information security protection measure implemented at all risk levels, including:

[0109] Adopt the entropy weight method to determine the weight of each user information security protection measure for each risk level;

[0110] Based on the proportion and corresponding weight of each user information security protection measure implemented at each risk level, the implementation ratio of each user information security protection measure in the consumer system is calculated.

[0111] Fig. 9 The figure is a flow chart of the entropy weight method for assigning weights in an embodiment of the present invention. In the entropy weight method, entropy is a measure of uncertain information. Entropy is inversely proportional to the amount of information. The smaller the entropy value, the better. The smaller the entropy value, the greater the amount of information and the greater the weight. Fig. 9 The original data, i.e. the proportion of all user information security protection measures, see Fig. 9 ,The process of assigning weights by entropy weight method includes:

[0112] (1) Normalization of raw data;

[0113] Standardization formula:

[0114]

[0115] x ij is the value of the i-th column and j-th row in Table 3;

[0116] (2) Calculate the proportion of different risk levels in all proportions;

[0117] Specific gravity calculation formula:

[0118] And ∑P ij =1

[0119] (3) Calculate the information entropy values ​​of different risk levels;

[0120] Information entropy calculation formula:

[0121] in

[0122] (4) Calculate the weight of each risk level;

[0123] Weight calculation formula:

[0124]

[0125] ω j is the weight of the risk level in the jth row.

[0126] Through the above calculation, we can get that the weight of risk level 1 is 0.471, the weight of risk level 2 is 0.297, and the weight of risk level 3 is 0.231.

[0127] According to the weights calculated above and the data in Table 1, the implementation ratio of each user information security protection measure by the consumer system can be obtained as shown in Table 4.

[0128] Table 4

[0129]

[0130] The embodiment of the present invention further proposes a device for analyzing the security protection degree of user information in a consumer system, the principle of which is similar to the method for analyzing the security protection degree of user information in a consumer system, and will not be described in detail here.

[0131] Fig.10 Schematic diagram of a user information security protection degree analysis device in a consumption system in an embodiment of the present invention, comprising:

[0132] Field extraction module 1001, used to extract the form in the consumption system, analyze the form, and extract user-related fields;

[0133] The risk field analysis module 1002 is used to analyze whether the user-related field is a risk field according to the display of the value of the user-related field on the front-end interface of the consumption system;

[0134] An interaction flow data statistics module 1003 is used to count the interaction flow data containing risk fields of all front-end interfaces of the consumption system;

[0135] A user information threat model building module 1004 is used to build a user information threat model based on the interaction flow data, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point of the front-end page of the consumption system, and the threat analysis table includes user information security protection measures;

[0136] The interactive flow data acquisition module 1005 is used to obtain the real-time interactive flow data between the user and the consumption system when the user interacts with the consumption system;

[0137] The risk level classification module 1006 is used to determine the risk level of each risk field in the real-time interactive flow data according to the preset risk level classification conditions;

[0138] The implementation analysis module 1007 is used to input the real-time interaction flow data into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level; according to the proportion of each user information security protection measure implemented at all risk levels, the implementation proportion of each user information security protection measure in the consumer system is determined, and the implementation proportion is used as the protection proportion of the user information security protection level in the consumer system.

[0139] In one embodiment, the risk field analysis module is used to:

[0140] If the value of the user-related field cannot be displayed on the front-end interface of the consumption system, the user-related field is determined to be a risk field;

[0141] If the value of the user-related field can be displayed on the front-end interface of the consumption system, but only partial information of the value of the user-related field is displayed, it is determined that the user-related field is a risk field.

[0142] In one embodiment, the users include consumer users, merchant users, and administrator users of the consumer system;

[0143] The user-related fields include a user information field and a transaction field;

[0144] The front-end interface includes a consumer user display interface, a merchant display interface and an administrator user display interface;

[0145] The interactive flow data includes a user input data field and a front-end page display data field.

[0146] In one embodiment, the user information threat model building module is used to:

[0147] According to the interaction flow data, an interaction scene graph is constructed, and according to the corresponding function points and the interaction scene graph of the front-end page of the consumption system, a data flow graph of each function point is constructed;

[0148] According to all data flow diagrams, a user information threat model is constructed, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point, and the threat analysis table includes user information security protection measures.

[0149] In one embodiment, the user information threat model building module is used to:

[0150] Determine that the external entity is a consumption system, a user, and an associated system of the consumption system, wherein the associated system is a system with which a value of a risk field flows with the consumption system;

[0151] Determine each interactive flow data and corresponding data flow direction between external entities according to the interactive flow data; wherein the consumer system and each external entity have at least one interactive flow data in the same data flow direction;

[0152] Based on each interaction flow data between the consumer system and the external entity, the trust boundary is determined to form an interaction scenario graph.

[0153] In one embodiment, the user information threat model building module is used to:

[0154] From the interaction scenario diagram, identify the users involved in each functional point;

[0155] For each function point, a data flow graph of the function point is constructed based on each user involved in the function point and each interaction flow data of each user.

[0156] In one embodiment, the user information threat model building module is used to:

[0157] For each interactive flow data of each functional point in each data flow diagram, a threat analysis table is formed;

[0158] Determine the user information threat type in each threat analysis table and the user information security protection measures corresponding to each user information threat type.

[0159] In one embodiment, the implementation analysis module is used to:

[0160] Count the risk fields of the same risk level in the interaction flow data;

[0161] According to the statistical implementation of each user information security protection measure in all threat analysis diagrams for each risk field of the same risk level, calculate the proportion of each user information security protection measure implemented for the risk field;

[0162] The average ratio of each user information security protection measure implemented for all risk fields of the same risk level is calculated to obtain the ratio of each user information security protection measure implemented for each risk level.

[0163] In one embodiment, the implementation analysis module is used to:

[0164] Adopt the entropy weight method to determine the weight of each user information security protection measure for each risk level;

[0165] Based on the proportion and corresponding weight of each user information security protection measure implemented at each risk level, the implementation ratio of each user information security protection measure in the consumer system is calculated.

[0166] In summary, the method and device proposed in the embodiments of the present invention have the following beneficial effects:

[0167] The degree of customer information security protection in the consumer system can be effectively analyzed, wherein, by extracting forms, analyzing to obtain risk fields, and counting interaction flow data, a threat model for user information can be constructed. The user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point on the front-end page of the consumer system. In this way, after the subsequent table obtains real-time interaction flow data, the implementation ratio of each user information security protection measure in the consumer system can be analyzed, that is, the protection ratio analysis of the degree of user information security protection can be realized, so that subsequent developers can perform security upgrades and improvements to the consumer system.

[0168] The solution proposed in the embodiment of the present invention shifts the personal customer information data security risk assessment work to the left and front, reduces security threats, and reduces the economic cost of consumer system repair. The proposed threat model aims to audit key risk nodes, thereby strengthening the refined management and control of user information data security; the existing user information data security risk management scheme has a strong sense of separation and separation from the actual project development process, and it is difficult to establish a close connection with the specific implementation links in the project implementation process. Threat modeling is used to quantify data security risks, and specific data security management measures are used as a handle to evaluate user information data security risks and improve user information data security risk management capabilities. It is conducive to risk management of the entire consumer system, tracking and managing the threats found, analyzing the threats faced by the consumer system and the possible attacks it may suffer, thereby reducing the supply side of the system, and then reducing the possibility and impact of attacks on the consumer system.

[0169] An embodiment of the present invention further provides a computer device, Fig.11 It is a schematic diagram of a computer device in an embodiment of the present invention. The computer device 1100 includes a memory 1110, a processor 1120, and a computer program 1130 stored in the memory 1110 and executable on the processor 1120. When the processor 1120 executes the computer program 1130, the method for analyzing the degree of security protection of user information in the above-mentioned consumer system is implemented.

[0170] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for analyzing the degree of security protection of user information in the above-mentioned consumer system is implemented.

[0171] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the method for analyzing the degree of security protection of user information in the consumption system is implemented.

[0172] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0173] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0174] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0175] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0176] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A method for analyzing the degree of user information security protection in a consumer system, characterized in that: include: Extract the form in the consumption system, analyze the form, and extract user-related fields; Analyze whether the user-related fields are risk fields based on the display of the values ​​of the user-related fields on the front-end interface of the consumption system; Collect statistics on the interaction flow data containing risk fields of all front-end interfaces of the consumption system; According to the interaction flow data, a user information threat model is constructed, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point of the front-end page of the consumption system, and the threat analysis table includes user information security protection measures; When users interact with the consumption system, obtain real-time interaction flow data between the users and the consumption system; According to the preset risk level classification conditions, determine the risk level of each risk field in the real-time interactive flow data; Input the real-time interaction flow data into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level; According to the proportion of each user information security protection measure implemented at all risk levels, the implementation ratio of each user information security protection measure in the consumer system is determined, and the implementation ratio is used as the protection ratio of the user information security protection level in the consumer system.

2. The method according to claim 1, characterized in that According to the display of the values ​​of user-related fields on the front-end interface of the consumption system, analyze whether the user-related fields are risk fields, including: If the value of the user-related field cannot be displayed on the front-end interface of the consumption system, the user-related field is determined to be a risk field; If the value of the user-related field can be displayed on the front-end interface of the consumption system, but only partial information of the value of the user-related field is displayed, it is determined that the user-related field is a risk field.

3. The method according to claim 1, characterized in that The users include consumer users, merchant users and administrator users of the consumption system; The user-related fields include a user information field and a transaction field; The front-end interface includes a consumer user display interface, a merchant display interface and an administrator user display interface; The interactive flow data includes a user input data field and a front-end page display data field.

4. The method according to claim 1, characterized in that According to the interaction flow data, a user information threat model is constructed, including: According to the interaction flow data, an interaction scene graph is constructed, and according to the corresponding function points and the interaction scene graph of the front-end page of the consumption system, a data flow graph of each function point is constructed; According to the corresponding function points and interaction scenario diagrams of the front-end page of the consumer system, a data flow diagram for each function point is constructed; According to all data flow diagrams, a user information threat model is constructed, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point, and the threat analysis table includes user information security protection measures.

5. The method according to claim 4, characterized in that Constructing an interaction scene graph according to the interaction flow data, including: Determine that the external entity is a consumption system, a user, and an associated system of the consumption system, wherein the associated system is a system with which a value of a risk field flows with the consumption system; Determine each interactive flow data and corresponding data flow direction between external entities according to the interactive flow data; wherein the consumer system and each external entity have at least one interactive flow data in the same data flow direction; Based on each interaction flow data between the consumer system and the external entity, the trust boundary is determined to form an interaction scenario graph.

6. The method according to claim 4, characterized in that According to the corresponding function points and interaction scene diagrams of the front-end page of the consumer system, a data flow diagram for each function point is constructed, including: From the interaction scenario diagram, identify the users involved in each functional point; For each function point, a data flow graph of the function point is constructed based on each user involved in the function point and each interaction flow data of each user.

7. The method according to claim 4, characterized in that Based on all data flow diagrams, a user information threat model is constructed, including: For each interactive flow data of each functional point in each data flow diagram, a threat analysis table is formed; Determine the user information threat type in each threat analysis table and the user information security protection measures corresponding to each user information threat type.

8. The method according to claim 1, characterized in that Input the real-time interaction flow data into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level, including: Count the risk fields of the same risk level in the interaction flow data; According to the statistical implementation of each user information security protection measure in all threat analysis diagrams for each risk field of the same risk level, calculate the proportion of each user information security protection measure implemented for the risk field; The proportion of each user information security protection measure implemented for all risk fields of the same risk level is averaged to obtain the proportion of each user information security protection measure implemented for each risk level.

9. The method according to claim 1, characterized in that Determine the implementation ratio of each user information security protection measure by the consumer system based on the ratio of each user information security protection measure implemented at all risk levels, including: Adopt the entropy weight method to determine the weight of each user information security protection measure for each risk level; Based on the proportion and corresponding weight of each user information security protection measure implemented at each risk level, the implementation ratio of each user information security protection measure in the consumer system is calculated.

10. A device for analyzing the degree of user information security protection in a consumer system, characterized in that: include: Field extraction module, used to extract forms from the consumption system, analyze the forms, and extract user-related fields; The risk field analysis module is used to analyze whether the user-related fields are risk fields based on the display of the values ​​of the user-related fields on the front-end interface of the consumption system; The interactive flow data statistics module is used to count the interactive flow data containing risk fields of all front-end interfaces of the consumption system; A user information threat model construction module, used to construct a user information threat model according to the interaction flow data, wherein the user information threat model includes a threat analysis table corresponding to each interaction flow data of each functional point of the front-end page of the consumption system, and the threat analysis table includes user information security protection measures; An interactive flow data acquisition module is used to obtain real-time interactive flow data between the user and the consumption system when the user interacts with the consumption system; The risk level classification module is used to determine the risk level of each risk field in the real-time interactive flow data according to the preset risk level classification conditions; An implementation analysis module is used to input real-time interaction flow data into the user information threat model to obtain the proportion of each user information security protection measure implemented at each risk level; According to the proportion of each user information security protection measure implemented at all risk levels, the implementation ratio of each user information security protection measure in the consumer system is determined, and the implementation ratio is used as the protection ratio of the user information security protection level in the consumer system.

11. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 9 is implemented.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 9 is implemented.

13. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 9 is implemented.

Images