Method and device for distributing index weight in network security performance evaluation

Abstract

The invention discloses an index weight distribution method and device in network security performance evaluation, and the method comprises the steps: building an evaluation index system of network security performance, determining each first index weight in each level of the evaluation index system based on an analytic hierarchy process, obtaining an evaluation target in the evaluation index system, and obtaining the evaluation target in the evaluation index system; according to the occurrence frequency of the evaluation target in the preset sample data, index frequency analysis is carried out to determine a second index weight, the index importance degree in the evaluation index system is determined, and according to the index importance degree, analysis and calculation are carried out to determine a third index weight; a dynamic weight distribution algorithm is constructed based on the first index weight, the second index weight and the third index weight, the index weights are distributed based on the dynamic weight distribution algorithm, the importance and the change frequency of the indexes can be comprehensively considered, a more accurate evaluation result is provided, the weights of the indexes are adjusted by adopting a dynamic weight distribution mechanism, and the evaluation efficiency is improved. And the weight distribution has certain timeliness.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to a method and device for allocating indicator weights in network security effectiveness evaluation. Background Art

[0002] With the rapid development of network technology, network security effectiveness evaluation is becoming more and more important. Traditional network security effectiveness evaluation often relies on simple evaluation or weighted average method.

[0003] Therefore, there is a need for a network security performance evaluation method that can more accurately reflect the actual performance. Summary of the invention

[0004] In view of the above problems, the present application provides a method and device for allocating indicator weights in network security effectiveness evaluation, which can more accurately reflect the actual effectiveness of network security and provide a basis for network security management.

[0005] In a first aspect, an embodiment of the present application provides a method for allocating indicator weights in network security effectiveness evaluation, including:

[0006] Establish an evaluation index system for network security effectiveness;

[0007] Determine the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method;

[0008] Acquire an evaluation target in the evaluation indicator system, and perform an indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine a second indicator weight;

[0009] Determine the importance of the indicators in the evaluation indicator system, and determine the weight of the third indicator based on the analysis and calculation of the importance of the indicators;

[0010] A dynamic weight allocation algorithm is constructed based on the first indicator weight, the second indicator weight and the third indicator weight to allocate indicator weights based on the dynamic weight allocation algorithm.

[0011] In some embodiments, determining the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method includes:

[0012] Decompose the indicators of the evaluation indicator system into a ladder-level structure indicator system according to their mutual subordinate relationships;

[0013] Comparisons are made based on expert evaluations on a predetermined ratio scale to determine a judgment matrix;

[0014] Calculate the weight of each indicator in the judgment matrix of each layer relative to the previous layer;

[0015] All weight values ​​are ranked hierarchically, and the first indicator weight of all indicators relative to the overall goal is calculated.

[0016] In some embodiments, determining the importance of indicators in the evaluation indicator system, and determining the weight of the third indicator according to the analysis and calculation of the importance of the indicators, includes:

[0017] Performing dimensionless processing on the evaluation indicators in the evaluation indicator system to obtain evaluation indicator values, wherein the evaluation indicators include: benefit-based evaluation indicators and cost-based evaluation indicators;

[0018] The evaluation index values ​​are sorted according to the index importance, and scores are assigned to the sorted evaluation index values ​​according to the importance, and the third index weight is calculated.

[0019] In some embodiments, constructing a dynamic weight allocation algorithm based on the first indicator weight, the second indicator weight, and the third indicator weight to allocate indicator weights based on the dynamic weight allocation algorithm includes:

[0020] The weight of the first indicator, the weight of the second indicator and the weight of the third indicator are summed and averaged to obtain a weighted mean value of the target evaluation indicator;

[0021] Calculate the sum of all weight means in the evaluation target based on the first indicator weight, the second indicator weight and the third indicator weight;

[0022] The comprehensive weight of the target evaluation index is allocated based on the ratio of the weight mean and the total value.

[0023] In some embodiments, the determining the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method further includes:

[0024] Performing a consistency check on the judgment matrix, including: calculating the maximum eigenvalue, calculating the consistency index, and calculating the consistency ratio;

[0025] After the judgment matrix passes the consistency test, the indicator factor weights of the indicator factors corresponding to each indicator are calculated based on the weight allocation arithmetic mean method or geometric mean method.

[0026] In some embodiments, performing an indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine the second indicator weight includes:

[0027] Calculate all indicator frequencies based on the frequency of each evaluation target appearing in the preset sample data;

[0028] The indicator frequency is normalized to determine the second indicator weight.

[0029] In some embodiments, the evaluation index system includes: primary index, secondary index and tertiary index;

[0030] The first-level indicators include network security effectiveness evaluation indicators, which are used to demonstrate the overall evaluation of network security in the evaluation indicator system;

[0031] The secondary indicators include technical system capability indicators, active defense and emergency response capability indicators, basic support capability indicators and operational standard capability indicators. Each of the secondary indicators also includes a preset number of tertiary indicators.

[0032] In a second aspect, an embodiment of the present application provides a device for allocating indicator weights in network security effectiveness evaluation, including:

[0033] Modeling module, used to establish an evaluation index system for network security effectiveness;

[0034] A first determination module is used to determine the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method;

[0035] A second determination module is used to obtain an evaluation target in the evaluation indicator system, and perform an indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine a second indicator weight;

[0036] A third determination module is used to determine the importance of indicators in the evaluation indicator system, and to determine the weight of a third indicator based on the analysis and calculation of the importance of the indicators;

[0037] An allocation module is used to construct a dynamic weight allocation algorithm based on the first indicator weight, the second indicator weight and the third indicator weight, so as to allocate indicator weights based on the dynamic weight allocation algorithm.

[0038] In a third aspect, an embodiment of the present application provides an electronic device comprising a memory and a processor, wherein the memory stores program code that can be executed on the processor, and when the program code is executed by the processor, a method for allocating indicator weights in network security effectiveness evaluation as introduced in any implementation method of the first aspect is implemented.

[0039] In a fourth aspect, an embodiment of the present application provides a computer storage medium storing one or more programs, which can be executed by an electronic device as described in the third aspect to implement a method for allocating indicator weights in a network security effectiveness evaluation as described in any implementation method of the first aspect.

[0040] The embodiments of the present application provide a method, device, electronic device and storage medium for allocating indicator weights in network security performance evaluation. An evaluation indicator system for network security performance is established, and the weights of each first indicator in each level of the evaluation indicator system are determined based on the hierarchical analysis method. The evaluation target in the evaluation indicator system is obtained, and the indicator frequency analysis is performed according to the frequency of occurrence of the evaluation target in preset sample data to determine the second indicator weight, the importance of the indicators in the evaluation indicator system is determined, and the third indicator weight is determined based on the indicator importance analysis and calculation. A dynamic weight allocation algorithm is constructed based on the first indicator weight, the second indicator weight and the third indicator weight. The indicator weights are allocated based on the dynamic weight allocation algorithm, which can comprehensively consider the importance and change frequency of the indicators and provide more accurate evaluation results. The dynamic weight allocation mechanism is used to adjust the weights of each indicator so that the weight allocation has a certain timeliness.

[0041] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present application, nor is it intended to limit the scope of the present application. Other features of the present application will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Hereinafter, the present application will be described in more detail based on embodiments and with reference to the accompanying drawings.

[0043] Figure 1 A schematic diagram of a method for allocating indicator weights in network security effectiveness evaluation proposed in an embodiment of the present application is shown;

[0044] Figure 2 A flowchart of an exemplary method for allocating indicator weights in network security effectiveness evaluation proposed in an embodiment of the present application is shown;

[0045] Figure 3 A schematic diagram of an exemplary indicator weight allocation process proposed in an embodiment of the present application is shown;

[0046] Figure 4 A structural block diagram of an exemplary evaluation index system proposed in an embodiment of the present application is shown;

[0047] Figure 5 A flowchart of an exemplary dynamic weight allocation algorithm construction process proposed in an embodiment of the present application is shown;

[0048] Figure 6 A structural block diagram of a device for allocating indicator weights in network security effectiveness evaluation proposed in one embodiment of the present application is shown;

[0049] Figure 7A structural block diagram of an electronic device for executing a method for allocating indicator weights in a network security effectiveness evaluation according to an embodiment of the present application is shown;

[0050] Figure 8 A computer-readable storage medium for storing or carrying a method for allocating indicator weights in a network security effectiveness evaluation according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0051] In order to make the objectives, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with embodiments and drawings. The exemplary embodiments of the present invention and their description are only used to explain the present invention and are not intended to limit the present invention.

[0052] Traditional network security effectiveness evaluation often relies on simple evaluation or weighted average method, which cannot effectively evaluate network security.

[0053] In view of the above technical problems, the inventors have fully considered the importance and frequency changes of different indicators. In order to more accurately reflect the actual effectiveness, the inventors have combined the level and frequency for analysis and proposed a method, device, electronic device and storage medium for allocating indicator weights in network security effectiveness evaluation. The frequency analysis of network security effectiveness evaluation indicators can be performed to determine their importance in network security. According to the frequency analysis results of network security effectiveness evaluation indicators, a dynamic weight allocation mechanism is used to adjust the weight of each indicator, so that the weight allocation has a certain timeliness. The present invention aims to solve the limitations and challenges in the prior art through this innovative method. A method for allocating indicator weights in network security effectiveness evaluation is described in detail in subsequent embodiments.

[0054] The following is an introduction to the application scenario of a method for allocating indicator weights in network security effectiveness evaluation provided in an embodiment of the present application:

[0055] See also Figure 1 , Figure 1 Schematic diagram of a method for allocating weights of indicators in network security performance evaluation provided in an embodiment of the present application. In this embodiment, a method for allocating weights of indicators in network security performance evaluation can be applied to Figure 6 The device 300 for allocating index weights in network security performance evaluation is shown in FIG. Figure 7In the electronic device 200 shown, the electronic device may include one or more electronic devices, and information may be transmitted between the multiple electronic devices by wireless and / or wired means. The multiple electronic devices may collaborate to complete a method for assigning indicator weights in network security effectiveness evaluation. For example, the electronic device may include a computer, a mobile terminal, a tablet, etc., which is not limited in this application. Figure 1 The process shown is described in detail, and the method for allocating indicator weights in network security performance evaluation may include S110 to S150.

[0056] S110: Establish an evaluation index system for network security effectiveness.

[0057] In the embodiment of the present application, constructing a network security effectiveness evaluation index system is a systematic process, which organizes indicators of different dimensions and levels in an orderly manner to comprehensively and accurately reflect the network security effectiveness evaluation results.

[0058] It should be noted that the construction process mainly includes clarifying goals, formulating guidelines and plans, and paying attention to the quality and accuracy of data in the construction process to ensure the reliability and effectiveness of the indicator system.

[0059] In some embodiments, the evaluation index system includes: primary index, secondary index and tertiary index;

[0060] The first-level indicators include network security effectiveness evaluation indicators, which are used to demonstrate the overall evaluation of network security in the evaluation indicator system;

[0061] The second-level indicators include technical system capability indicators, active defense and emergency response capability indicators, basic support capability indicators and operational standard capability indicators. Each second-level indicator also includes a preset number of third-level indicators.

[0062] This application is not only suitable for organizations that have deployed a certain number of security systems to evaluate the protection effects and service capabilities of these systems in actual environments; it can also be applied to the development, maintenance and upgrade of various information systems, especially before the launch of new systems and after major changes, to ensure that the security of the system meets the expected standards.

[0063] In this embodiment, please refer to Figure 4 , Figure 4 This is a structural block diagram of an exemplary evaluation index system provided in an embodiment of the present application. The evaluation index system can be divided into three levels.

[0064] Among them, the secondary indicators refer to GB / T 18336-2001, GB / T 30270-2024, GB / T 33563-2024 and other evaluation criteria, and are designed in combination with the characteristics of network security.

[0065] Secondary indicators may include technical system capabilities, active defense and emergency response capabilities, basic guarantee capabilities and operational standard capabilities. Among them, technical system capabilities mainly evaluate the degree of damage to national and personal information security after network security is compromised, including intrusion detection, security incidents, threat response, threat disposal, false alarms and missed alarms, vulnerability patches, internal access, network traffic, security audits, etc.; active defense and emergency response capabilities mainly evaluate the acquisition and analysis of network security threat intelligence, including threat intelligence, emergency response, intrusion detection and protection, etc.; basic guarantee capabilities mainly evaluate the synchronization of network security and information system construction, including network security, human, financial and material resources, etc.; operational standard capabilities mainly evaluate network security management, including security management and security monitoring and auditing.

[0066] The third-level indicators are designed under the framework of the second-level indicators, and each second-level indicator has multiple third-level indicators.

[0067] The evaluation index system constructed in this embodiment can formulate performance evaluation indicators for network security from four aspects, namely, technical system capabilities, active defense and emergency response capabilities, basic support capabilities, and operational standardization capabilities. This method covers multiple aspects by establishing a multi-level index system to ensure that the evaluation results can truly reflect the network security status.

[0068] S120: Determine the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method.

[0069] In some embodiments, S120 further includes S121 to S124, wherein:

[0070] S121: Decompose the indicators of the evaluation indicator system into a ladder-level structure indicator system according to their mutual subordinate relationships.

[0071] S122: Compare according to the expert evaluation and a predetermined ratio scale to determine a judgment matrix.

[0072] S123: Calculate the weight value of each indicator in each layer of the judgment matrix relative to the previous layer.

[0073] S124: Sort the weight values ​​in order, and calculate the first indicator weight of all indicators relative to the overall goal.

[0074] In the embodiment of the present application, the hierarchical analysis method decomposes the various indicators of network security performance evaluation into a ladder-level hierarchical indicator system according to their mutual subordinate relationships. Experts make pairwise comparisons based on a certain ratio scale to form a judgment matrix, and then use mathematical methods to calculate the weight value of each indicator in each layer of the judgment matrix relative to the previous layer. Finally, a total hierarchical sorting is performed to calculate the weight coefficients of all indicators relative to the overall goal.

[0075] In the embodiment of the present application, each pair of elements is compared based on expert experience to determine their relative importance, and the fuzzy problem is quantified using a 1 to 9 scale method, where:

[0076] 1: equally important; 3: slightly important; 5: obviously important; 7: strongly important; 9: absolutely important; 2, 4, 6, 8: intermediate values ​​between the above values.

[0077] Assume that there are two indicator factors A i and A j The qualitative results and the corresponding quantitative results are shown in Table 1.

[0078]

[0079] Table 1

[0080] Construct the judgment matrix according to Table 1

[0081]

[0082] Where: a ij Indicates the importance of index i compared to index j, a ij >0,a ij *a ji =1.

[0083] In some embodiments, S120 also includes S125 to S126.

[0084] S125: Performing consistency check on the judgment matrix, including: calculating the maximum eigenvalue, calculating the consistency index, and calculating the consistency ratio.

[0085] In this embodiment, in order to ensure the rationality of the judgment matrix, a consistency check is required. Calculate the consistency ratio CR:

[0086] Calculate the maximum eigenvalue λ of the judgment matrix max ;

[0087] Calculate the consistency index C I :

[0088] Calculate the consistency ratio: Where R I is a random consistency indicator, which depends on the order n of the judgment matrix.

[0089] Among them, the R corresponding to the order n I The values ​​of the n-order judgment matrix shown in Table 2 correspond to R I value:

[0090] n 1 2 3 4 5 6 7 … <![CDATA[R I ]]> 0.00 0.00 0.58 0.90 1.12 1.26 1.36 …

[0091] Table 2

[0092] S126: After the judgment matrix passes the consistency test, the indicator factor weights of the indicator factors corresponding to each indicator are calculated based on the weight allocation arithmetic mean method or geometric mean method.

[0093] In the embodiment of the present application, the formula for obtaining the weight of the indicator factor by the arithmetic mean method of calculating the weight distribution of each indicator factor after the judgment matrix passes the hierarchical consistency test is:

[0094]

[0095] The formula for obtaining the weight of indicator factors using the geometric mean method is:

[0096]

[0097] It should be noted that the process of obtaining the weight of the indicator factor by the eigenvalue is as follows: according to the maximum eigenvalue λ max The corresponding eigenvector is obtained, and the obtained eigenvector is normalized to finally obtain the weight vector.

[0098] In this embodiment, the method combines qualitative and quantitative analysis, and decomposes the network security effectiveness evaluation into multiple levels by establishing a judgment matrix and calculating combined weights, thereby simplifying complex decision-making problems, helping to eliminate the influence of subjective factors, and improving the objectivity and reliability of network security effectiveness evaluation results.

[0099] S130: Obtain an evaluation target in the evaluation indicator system, and perform an indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine a second indicator weight.

[0100] In an embodiment of the present application, in the comprehensive evaluation of multiple indicators of network security, if a certain indicator appears frequently in the sample data, it means that the indicator has a greater impact on the evaluation results, and therefore should be given a higher authority; otherwise, it should be given a lower weight.

[0101] In some embodiments, S130 includes S131 to S132, wherein:

[0102] S131: Calculate all indicator frequencies based on the frequency of each evaluation target appearing in the preset sample data.

[0103] In this embodiment, when the evaluation target A=A1, A1...A n}, count the number of times each evaluation indicator appears in the sample data:

[0104]

[0105] S132: Normalize the indicator frequency to determine the second indicator weight.

[0106] In this embodiment, since the dimensions of different indicators may be different, for evaluation and comparison, the frequencies of all indicators need to be normalized:

[0107]

[0108] The weight of each indicator is determined based on the normalized frequency value.

[0109] In this embodiment, a frequency analysis may be performed on the network security effectiveness evaluation index to determine its importance in network security.

[0110] S140: Determine the importance of indicators in the evaluation indicator system, and determine the weight of the third indicator based on the analysis and calculation of the indicator importance.

[0111] In some embodiments, S140 may include S141 to S142, wherein:

[0112] S141: Perform dimensionless processing on the evaluation indicators in the evaluation indicator system to obtain evaluation indicator values, wherein the evaluation indicators include: benefit-based evaluation indicators and cost-based evaluation indicators.

[0113] In the embodiment of the present application, in order to ensure the scientificity and accuracy of the evaluation matrix, it is necessary to perform dimensionless processing on all network security effectiveness evaluation indicators. Taking into account that network security effectiveness evaluation indicators have different representative meanings and value ranges, the evaluation indicators are divided into benefit indicators and cost indicators. The larger the value of the benefit indicator, the more beneficial it is, and the smaller the value of the cost indicator, the more beneficial it is.

[0114] Among them, the benefit-based evaluation index means that the larger the determined value of the index is, the more beneficial it is. The dimensionless calculation formula for this type of index is as follows:

[0115]

[0116] In the formula, are the maximum and minimum limits of the i-th evaluation index respectively.

[0117] Cost-based evaluation indicators refer to indicators whose determined values ​​are smaller, the more beneficial they are. The dimensionless processing method for such indicators is as follows:

[0118]

[0119] In the formula, are the maximum and minimum limits of the i-th evaluation index respectively.

[0120] S142: sorting the evaluation index values ​​according to the index importance, assigning scores to the sorted evaluation index values ​​according to the importance, and calculating the third index weight.

[0121] In the embodiment of the present application, importance can be sorted according to dimensionless network security performance evaluation index values, and the sorted indicators can be divided into the importance levels of urgent, important, secondary, and general indicators, and corresponding scores can be assigned.

[0122] For example, the indicator x i Importance ranking and corresponding score c i As shown in Table 3:

[0123]

[0124] Among them, the calculation formula for weight allocation based on the importance of indicators is:

[0125]

[0126] Among them, represents the score assigned to the indicator in the ranking of evaluation indicator importance.

[0127] S150: constructing a dynamic weight allocation algorithm based on the first indicator weight, the second indicator weight, and the third indicator weight to allocate indicator weights based on the dynamic weight allocation algorithm.

[0128] In some embodiments, S150 includes S151 to S153.

[0129] S151: Sum and average the first indicator weight, the second indicator weight, and the third indicator weight to obtain a weighted mean value of the target evaluation indicator.

[0130] S152: Calculate the sum of all weight means in the evaluation target based on the first indicator weight, the second indicator weight and the third indicator weight.

[0131] S153: Allocate a comprehensive weight of the target evaluation index based on the ratio of the weight mean and the total value.

[0132] In this embodiment, the network security effectiveness evaluation index weight w obtained based on the hierarchical analysis method is i1 , the weight w obtained by the indicator frequency i2 and the weight w calculated considering the importance of the indicator i3 Take the sum and average to get index A i The weighted mean w j , and then calculate the sum of the weighted means of all indicators of network security effectiveness evaluation target A w k , and finally calculate the index A i The comprehensive weight w i.

[0133] Among them, see Figure 3 and Figure 5 , Figure 3 A schematic diagram of an exemplary indicator weight allocation process, Figure 5 An exemplary dynamic weight allocation algorithm construction process diagram,

[0134] The dynamic weight allocation indicator weight is calculated using the following formula:

[0135]

[0136] In the formula, w j Indicator A i The mean of weights is allocated through multi-dimensional comprehensive analysis such as hierarchical analysis method, indicator frequency and indicator importance.

[0137]

[0138] In the formula, w k It represents the sum of the mean values ​​of the indicator weights of all indicators involved in the evaluation target A through the hierarchical analysis method, indicator frequency, indicator importance and other multi-dimensional comprehensive allocation.

[0139]

[0140] In the formula, w i Indicator A i The weights of network security effectiveness evaluation indicators are obtained through dynamic allocation of multiple dimensions such as hierarchical analysis method, indicator frequency and indicator importance.

[0141] In this embodiment, network security effectiveness is evaluated based on hierarchical analysis, frequency analysis and importance, which can more accurately evaluate the importance of each indicator and allocate weights of network security effectiveness evaluation indicators accordingly. The dynamic weight allocation mechanism helps to improve the accuracy of network security effectiveness evaluation results and reflect the actual situation of network security.

[0142] In summary, see Figure 2 , Figure 2 This is a flowchart of a method for assigning indicator weights in an exemplary network security effectiveness evaluation of this application. By introducing a network security effectiveness evaluation based on hierarchical analysis and frequency analysis, a new solution is proposed to address the uncertainty in network security effectiveness evaluation, thereby improving the stability and reliability of the evaluation results and providing a new tool for network security management.

[0143] This application establishes a multi-level indicator system, determines the importance of each indicator through frequency analysis, and adopts a dynamic weight allocation mechanism to adjust the weight of each indicator, thereby achieving a scientific and reasonable allocation of the weights of network security effectiveness evaluation indicators, and has broad application prospects and practical value.

[0144] See also Figure 6 , Figure 6 The present invention provides a structural block diagram of a device for allocating indicator weights in network security performance evaluation. The device 300 for allocating indicator weights in network security performance evaluation includes: a modeling module 310, a first determination module 320, a second determination module 330, a third determination module 340 and an allocation module 350, wherein:

[0145] The modeling module 310 is used to establish an evaluation index system for network security effectiveness.

[0146] The first determination module 320 is used to determine the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method.

[0147] The second determination module 330 is used to obtain the evaluation target in the evaluation indicator system, and perform indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine the second indicator weight.

[0148] The third determination module 340 is used to determine the importance of indicators in the evaluation indicator system, and determine the third indicator weight according to the analysis and calculation of the indicator importance.

[0149] The allocation module 350 is used to construct a dynamic weight allocation algorithm based on the first indicator weight, the second indicator weight and the third indicator weight, so as to allocate the indicator weight based on the dynamic weight allocation algorithm.

[0150] The device embodiment in the present application may also include other modules, which specifically correspond to part of the content of the above method.

[0151] It should be noted that the device embodiments in the present application correspond to each other with the aforementioned method embodiments. The specific principles in the device embodiments can be found in the contents of the aforementioned method embodiments and will not be repeated here.

[0152] In several embodiments provided in this embodiment, the coupling between modules may be electrical, mechanical or other forms of coupling.

[0153] In addition, each functional module in each embodiment of the present invention may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of software functional modules.

[0154] See also Figure 7 , Figure 7 The present application provides a structural block diagram of an electronic device 200 that can execute the above-mentioned method for allocating indicator weights in network security effectiveness evaluation. The electronic device 200 can be a smart phone, tablet computer, computer, portable computer or other device.

[0155] The electronic device 200 further includes a processor 202 and a memory 204. The memory 204 stores a program that can execute the contents of the aforementioned embodiments, and the processor 202 can execute the program stored in the memory 204.

[0156] Among them, the processor 202 may include one or more cores and message matrix units for processing data. The processor 202 uses various interfaces and lines to connect various parts of the entire electronic device 200, and executes various functions and processes data of the electronic device 200 by running or executing instructions, programs, code sets or instruction sets stored in the memory 204, and calling data stored in the memory 204. Optionally, the processor 202 can be implemented in at least one hardware form of digital signal processing (Digital Signal Processing, DSP), field programmable gate array (Field-Programmable Gate Array, FPGA), and programmable logic array (Programmable Logic Array, PLA). The processor 202 can integrate one or a combination of a central processing unit (Central Processing Unit, CPU), a graphics processing unit (Graphics Processing Unit, GPU) and a modulation decoder. Among them, the CPU mainly processes the operating system, user interface and application programs; the GPU is responsible for rendering and drawing display content; and the modem is used to process wireless communications. It can be understood that the above-mentioned modulation decoder may not be integrated into the processor, but may be implemented separately through a communication chip.

[0157] The memory 204 may include a random access memory (RAM) or a read-only memory (ROM). The memory 204 may be used to store instructions, programs, codes, code sets or instruction sets. The memory 204 may include a program storage area and a data storage area, wherein the program storage area may store instructions for implementing an operating system, instructions for implementing at least one function (e.g., instructions for a user to obtain a random number), instructions for implementing the following various method embodiments, etc. The data storage area may also store data (e.g., random numbers) created by the terminal during use, etc.

[0158] The electronic device 200 may also include a network module and a screen. The network module is used to receive and send electromagnetic waves, realize the mutual conversion between electromagnetic waves and electrical signals, and thus communicate with a communication network or other devices, such as communicating with an audio playback device. The network module may include various existing circuit components for performing these functions, such as antennas, radio frequency transceivers, digital signal processors, encryption / decryption chips, user identity modules (SIM) cards, memories, etc. The network module may communicate with various networks such as the Internet, corporate intranets, wireless networks, or communicate with other devices via wireless networks. The above-mentioned wireless networks may include cellular telephone networks, wireless local area networks, or metropolitan area networks. The screen may display interface content and perform data interaction.

[0159] Please refer to Figure 8 , Figure 8 The structure block diagram of a computer-readable storage medium provided in an embodiment of the present application is shown. The computer-readable storage medium 400 stores a program code 410, and the program code 410 can be called by a processor to execute the method described in the above method embodiment.

[0160] The computer-readable storage medium 400 may be an electronic memory such as a flash memory, an EEPROM (electrically erasable programmable read-only memory), an EPROM, a hard disk, or a ROM. Optionally, the computer-readable storage medium includes a non-transitory computer-readable storage medium. The computer-readable storage medium 400 has storage space for program codes 410 that perform any method steps in the above method. These program codes 410 can be read from or written to one or more computer program products. The program codes 410 can be compressed, for example, in an appropriate form.

[0161] The embodiment of the present application also provides a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. The processor of the computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes a method for allocating indicator weights in a network security effectiveness evaluation described in the above various optional implementations.

[0162] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments can still be modified, or some of the technical features can be replaced by equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for allocating indicator weights in network security effectiveness evaluation, characterized in that: The method comprises: Establish an evaluation index system for network security effectiveness; Determine the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method; Acquire an evaluation target in the evaluation indicator system, and perform an indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine a second indicator weight; Determine the importance of the indicators in the evaluation indicator system, and determine the weight of the third indicator based on the analysis and calculation of the importance of the indicators; A dynamic weight allocation algorithm is constructed based on the first indicator weight, the second indicator weight and the third indicator weight to allocate indicator weights based on the dynamic weight allocation algorithm.

2. According to the method for allocating indicator weights in network security effectiveness evaluation according to claim 1, it is characterized in that: The step of determining the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method includes: Decompose the indicators of the evaluation indicator system into a ladder-level structure indicator system according to their mutual subordinate relationships; Comparisons are made based on expert evaluations on a predetermined ratio scale to determine a judgment matrix; Calculate the weight of each indicator in the judgment matrix of each layer relative to the previous layer; All weight values ​​are ranked hierarchically, and the first indicator weight of all indicators relative to the overall goal is calculated.

3. The method for allocating indicator weights in network security effectiveness evaluation according to claim 2, characterized in that: Determining the importance of indicators in the evaluation indicator system, and determining the weight of the third indicator according to the analysis and calculation of the importance of the indicators, includes: Performing dimensionless processing on the evaluation indicators in the evaluation indicator system to obtain evaluation indicator values, wherein the evaluation indicators include: benefit-based evaluation indicators and cost-based evaluation indicators; The evaluation index values ​​are sorted according to the index importance, and scores are assigned to the sorted evaluation index values ​​according to the importance, and the third index weight is calculated.

4. The method for allocating indicator weights in network security effectiveness evaluation according to claim 1, characterized in that: The step of constructing a dynamic weight allocation algorithm based on the first indicator weight, the second indicator weight, and the third indicator weight to allocate indicator weights based on the dynamic weight allocation algorithm includes: The weight of the first indicator, the weight of the second indicator and the weight of the third indicator are summed and averaged to obtain a weighted mean value of the target evaluation indicator; Calculate the sum of all weight means in the evaluation target based on the first indicator weight, the second indicator weight and the third indicator weight; The comprehensive weight of the target evaluation index is allocated based on the ratio of the weight mean and the total value.

5. The method for allocating indicator weights in network security effectiveness evaluation according to claim 2, characterized in that: The step of determining the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method also includes: Performing a consistency check on the judgment matrix, including: calculating the maximum eigenvalue, calculating the consistency index, and calculating the consistency ratio; After the judgment matrix passes the consistency test, the indicator factor weights of the indicator factors corresponding to each indicator are calculated based on the weight allocation arithmetic mean method or geometric mean method.

6. The method for allocating indicator weights in network security effectiveness evaluation according to claim 2, characterized in that: The step of performing an indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine the second indicator weight includes: Calculate all indicator frequencies based on the frequency of each evaluation target appearing in the preset sample data; The indicator frequency is normalized to determine the second indicator weight.

7. The method for allocating indicator weights in network security effectiveness evaluation according to claim 1, characterized in that: The evaluation index system includes: primary index, secondary index and tertiary index; The first-level indicators include network security effectiveness evaluation indicators, which are used to demonstrate the overall evaluation of network security in the evaluation indicator system; The secondary indicators include technical system capability indicators, active defense and emergency response capability indicators, basic support capability indicators and operational standard capability indicators. Each of the secondary indicators also includes a preset number of tertiary indicators.

8. A device for allocating indicator weights in network security effectiveness evaluation, characterized in that: The device comprises: Modeling module, used to establish an evaluation index system for network security effectiveness; A first determination module is used to determine the weight of each first indicator in each level of the evaluation indicator system based on the hierarchical analysis method; A second determination module is used to obtain an evaluation target in the evaluation indicator system, and perform an indicator frequency analysis according to the frequency of occurrence of the evaluation target in the preset sample data to determine a second indicator weight; A third determination module is used to determine the importance of indicators in the evaluation indicator system, and to determine the weight of a third indicator based on the analysis and calculation of the importance of the indicators; An allocation module is used to construct a dynamic weight allocation algorithm based on the first indicator weight, the second indicator weight and the third indicator weight, so as to allocate indicator weights based on the dynamic weight allocation algorithm.

9. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores program code that can be run on the processor, and when the program code is executed by the processor, a method for allocating indicator weights in network security effectiveness evaluation as described in any one of claims 1-7 is implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores program codes, and the program codes can be called by one or more processors to execute a method for allocating indicator weights in network security effectiveness evaluation as described in any one of claims 1-7.

Images