Network security risk assessment method, system and terminal based on 5G network

Abstract

The invention discloses a network security risk assessment method, system and terminal based on a 5G network, and the method comprises the steps: obtaining the data information of a 5G network device, and carrying out the loss setting of the data information, and obtaining an information loss value; acquiring historical security events and historical vulnerability data of the 5G network equipment, and performing broken probability prediction on a firewall of the 5G network equipment according to the historical security events and the historical vulnerability data to obtain a probability prediction result; obtaining stage data of a target object corresponding to the 5G network equipment, and performing grading processing on the stage data to obtain a stage grading result; and performing network risk assessment on the 5G network equipment according to the information loss value, the probability prediction result and the stage grading result to obtain an assessment result. According to the invention, the probability that the firewall is broken can be effectively predicted, so that the accuracy of a network security risk assessment result is improved, and the security of network equipment is ensured.

Description

Technical Field

[0001] The present invention relates to the field of network security risk assessment technology, and in particular to a network security risk assessment method, system, terminal and computer-readable storage medium based on a 5G network. Background Art

[0002] 5G networks are responsible for meeting the new demands of future communications and will be an important cornerstone for achieving comprehensive connectivity and comprehensive mobile informatization. Obviously, under the new communication demands and application environments, 5G networks will naturally have significantly different demands in terms of security. With the advent of the digital age, the security issues of 5G networks have become increasingly important. Malicious attacks, data leaks and other security incidents have brought threats to individuals and enterprises. Therefore, in the field of network communication security, how to quickly and accurately assess network security risks has become the focus of research.

[0003] The existing network security risk method starts with the probability of firewall breaches, but the method of predicting the probability of firewall breaches is not accurate enough, resulting in large errors in risk assessment results. How to improve the probability of predicting firewall breaches has become a difficult problem that needs to be solved urgently.

[0004] Therefore, the prior art still needs to be improved and developed. Summary of the invention

[0005] The main purpose of the present invention is to provide a network security risk assessment method, system and terminal based on 5G network, aiming to solve the problem that the method of predicting the probability of firewall breach in the prior art is not accurate enough, resulting in large errors in risk assessment results.

[0006] To achieve the above object, the present invention provides a network security risk assessment method based on a 5G network, and the network security risk assessment method based on a 5G network comprises the following steps:

[0007] Acquire data information of 5G network equipment, perform loss determination on the data information, and obtain an information loss value;

[0008] Obtaining historical security events and historical vulnerability data of the 5G network device, and predicting the probability of a firewall of the 5G network device being breached based on the historical security events and the historical vulnerability data to obtain a probability prediction result;

[0009] Acquire stage data of the target object corresponding to the 5G network device, perform grading processing on the stage data, and obtain a stage grading result;

[0010] A network risk assessment is performed on the 5G network equipment according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result.

[0011] Optionally, the network security risk assessment method based on 5G network, wherein the step of obtaining data information of 5G network equipment and performing loss determination on the data information to obtain an information loss value, specifically includes:

[0012] Acquire data information of a 5G network device, and perform a first loss calculation, a second loss calculation, and a third loss calculation on information leakage of the data information according to a loss type to obtain a first damage value, a second loss value, and a third loss value;

[0013] The first loss value, the second loss value and the third loss value are combined to obtain a total loss value, and the total loss value is marked to obtain an information loss value.

[0014] Optionally, the network security risk assessment method based on 5G network, wherein the acquiring of historical security events and historical vulnerability data of the 5G network device, and predicting the probability of a firewall of the 5G network device being breached according to the historical security events and the historical vulnerability data, to obtain a probability prediction result, specifically includes:

[0015] Obtain historical security events and historical vulnerability data of the 5G network device, obtain the number of first network attacks at a first preset time according to the historical security events, and obtain the number of first firewall breaches at a first preset time according to the historical vulnerability data;

[0016] Calculating an average of the first network attack times to obtain a first average attack times, and calculating a probability of the firewall being breached according to the first network attack times and the first firewall being breached times to obtain a first probability;

[0017] Acquire a second number of network attacks within a second preset time according to the historical security events, average the second number of network attacks to obtain a second average number of attacks, and determine an attack number trend of the second number of network attacks within the second preset time;

[0018] The first average number of attacks is compared with the second average number of attacks to obtain a comparison result, and the probability of the firewall being breached is predicted based on the comparison result, the trend of the number of attacks and the first probability to obtain a probability prediction result.

[0019] Optionally, the network security risk assessment method based on the 5G network, wherein the predicting the probability of the firewall being breached according to the comparison result and the first probability to obtain the probability prediction result specifically includes:

[0020] If the comparison result is that the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to a first formula to obtain a probability prediction result, and the first formula is: W=W1×(1+10%×(BA));

[0021] If the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to a second formula to obtain a probability prediction result, and the second formula is: W=W1×(1+5%×(BA));

[0022] If the first average attack number is less than the second average attack number, and the attack number trend is in a zigzag state, the probability of the firewall being breached is predicted according to a third formula to obtain a probability prediction result, and the third formula is: W=W1×(1+7%×(BA));

[0023] If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to the fourth formula to obtain a probability prediction result, and the fourth formula is: W=W1×(1-5%×(AB));

[0024] If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to the fifth formula to obtain a probability prediction result, and the fifth formula is: W=W1×(1-10%×(AB));

[0025] If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is in a zigzag state, the probability of the firewall being breached is predicted according to the sixth formula to obtain a probability prediction result, and the sixth formula is: W=W1×(1-7%×(AB));

[0026] Among them, W is the predicted probability of the firewall being breached, W1 is the first probability, A is the first average number of attacks, and B is the second average number of attacks.

[0027] Optionally, in the network security risk assessment method based on 5G network, the stage classification results include first level, second level, third level, fourth level and fifth level;

[0028] The step of obtaining the stage data of the target object corresponding to the 5G network device and performing classification processing on the stage data to obtain a stage classification result specifically includes:

[0029] Obtaining stage data of the target object corresponding to the 5G network device, and grading the stage data according to the security level of the stage data, wherein the stage data includes a stable development stage, a start-up stage, an expansion stage, a listing stage, and a merger stage;

[0030] If the stage data is a stable development stage, the stage data is graded as the first level;

[0031] If the stage data is the initial stage, the stage data is classified as the second level;

[0032] If the stage data is the expansion stage, the stage data is classified as the third level;

[0033] If the stage data is at the listing stage, the stage data is classified as the fourth level;

[0034] If the stage data is a merging stage, the stage data is graded as the fifth level.

[0035] Optionally, in the network security risk assessment method based on 5G network, the assessment result includes primary risk, secondary risk and tertiary risk;

[0036] The network risk assessment of the 5G network equipment is performed according to the information loss value, the probability prediction result and the stage classification result to obtain the assessment result, specifically including:

[0037] Assigning weight values ​​to the information loss value, the probability prediction result, and the stage grading result respectively to obtain a first weight value, a second weight value, and a third weight value;

[0038] Calculate a target risk parameter value of the 5G network device according to the first weight value, the second weight value, and the third weight value, and compare the target risk parameter value with a preset value by multiples to obtain a numerical comparison result;

[0039] If the target risk parameter value is less than one times the preset value, the assessment result of the 5G network device is determined to be a level one risk;

[0040] If the target risk parameter value is greater than or equal to one times the preset value and less than three times the preset value, the assessment result of the 5G network device is determined to be a level 2 risk;

[0041] If the target risk parameter value is greater than or equal to three times the preset value, the assessment result of the 5G network equipment is determined to be a level three risk.

[0042] Optionally, the network security risk assessment method based on the 5G network, wherein the network risk assessment is performed on the 5G network device according to the information loss value, the probability prediction result and the stage classification result to obtain the assessment result, and then further includes:

[0043] If the assessment result of the 5G network equipment is a level one risk, a level one warning message is generated, and the technical personnel are reminded to upgrade the network security protection measures according to the level one warning message;

[0044] If the assessment result of the 5G network equipment is a level 2 risk, a level 2 warning message is generated, the 5G network equipment is disconnected from the network according to the level 2 warning message, and the technical personnel are reminded to upgrade the network security protection measures;

[0045] If the assessment result of the 5G network equipment is a level 3 risk, a level 3 warning message is generated, and the 5G network equipment is powered off and disconnected from the network according to the level 3 warning message, and the technical staff is reminded to replace the network security protection measures.

[0046] Optionally, in the network security risk assessment method based on 5G network, the network security risk assessment system based on 5G network includes:

[0047] A loss setting module is used to obtain data information of 5G network equipment, perform loss setting on the data information, and obtain an information loss value;

[0048] A probability prediction module is used to obtain historical security events and historical vulnerability data of the 5G network device, and predict the probability of the firewall of the 5G network device being breached according to the historical security events and the historical vulnerability data to obtain a probability prediction result;

[0049] A stage classification module is used to obtain the stage data of the target object corresponding to the 5G network device, perform classification processing on the stage data, and obtain a stage classification result;

[0050] A risk assessment module is used to perform a network risk assessment on the 5G network equipment according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result.

[0051] In addition, to achieve the above-mentioned purpose, the present invention also provides a terminal, wherein the terminal includes: a memory, a processor, and a 5G network-based network security risk assessment program stored in the memory and executable on the processor, and the 5G network-based network security risk assessment program, when executed by the processor, implements the steps of the 5G network-based network security risk assessment method as described above.

[0052] In addition, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a network security risk assessment program based on a 5G network, and when the network security risk assessment program based on a 5G network is executed by a processor, the steps of the network security risk assessment method based on a 5G network as described above are implemented.

[0053] In the present invention, data information of 5G network equipment is obtained, and the data information is loss-valued to obtain the information loss value; historical security events and historical vulnerability data of 5G network equipment are obtained, and the probability of the firewall of the 5G network equipment being breached is predicted based on the historical security events and historical vulnerability data to obtain the probability prediction result; the stage data of the target object corresponding to the 5G network equipment is obtained, and the stage data is graded to obtain the stage grading result; the network risk assessment of the 5G network equipment is performed based on the information loss value, the probability prediction result and the stage grading result to obtain the assessment result. The present invention can effectively improve the probability of predicting that the firewall is breached, thereby improving the accuracy of the network security risk assessment result to ensure the security of network equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 It is a flowchart of a preferred embodiment of a network security risk assessment method based on a 5G network of the present invention;

[0055] Figure 2 It is a structural diagram of a preferred embodiment of a network security risk assessment system based on a 5G network of the present invention;

[0056] Figure 3 It is a schematic diagram of the operating environment of a preferred embodiment of the terminal of the present invention. DETAILED DESCRIPTION

[0057] In order to make the purpose, technical solution and advantages of the present invention clearer and more specific, the present invention is further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0058] It should be noted that if the embodiments of the present invention involve directional indications (such as up, down, left, right, front, back, etc.), the directional indications are only used to explain the relative position relationship, movement status, etc. between the components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication will also change accordingly.

[0059] In addition, if there are descriptions involving "first", "second", etc. in the embodiments of the present invention, the descriptions of "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or suggesting their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the ability of ordinary technicians in the field to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0060] The network security risk assessment method based on 5G network described in the preferred embodiment of the present invention is as follows: Figure 1 As shown, the network security risk assessment method based on 5G network includes the following steps:

[0061] Step S10: Obtain data information of the 5G network device, perform loss determination on the data information, and obtain an information loss value.

[0062] The step S10 comprises:

[0063] Step S11, obtaining data information of the 5G network device, and performing a first loss calculation, a second loss calculation, and a third loss calculation on the information leakage of the data information according to the loss type, to obtain a first damage value, a second loss value, and a third loss value;

[0064] Step S12: Combine the first loss value, the second loss value and the third loss value to obtain a total loss value, and mark the total loss value to obtain an information loss value.

[0065] Specifically, the existing network security risk method starts with the probability of a firewall being breached, but the method of predicting the probability of a firewall being breached is not accurate enough, resulting in a large error in the risk assessment result. In the embodiment of the present invention, by analyzing historical security events and vulnerability data, the probability of a 5G network device firewall being breached can be effectively predicted, thereby improving the network security risk assessment result. In addition, by comprehensively analyzing the losses caused by the breach of the firewall and the current stage of the target object corresponding to the 5G network device (for example, Enterprise A), the network security risk can be evaluated from multiple aspects and angles. The specific processing process is to obtain data information of a certain enterprise's 5G network equipment, and then, according to the 5G network device, the network security risk can be evaluated from multiple aspects and angles. The loss type performs a first loss calculation (for example, calculating the financial loss caused to Company A after the data information stored in the 5G network device is leaked), a second loss calculation (for example, calculating the reputation loss caused to Company A after the data information stored in the 5G network device is leaked), and a third loss calculation (for example, calculating the cooperative relationship loss caused to Company A after the data information stored in the 5G network device is leaked) for the information leakage of the data information to obtain a first damage value, a second loss value, and a third loss value; then, the first loss value, the second loss value, and the third loss value are combined to obtain a total loss value, and the total loss value is marked to obtain an information loss value.

[0066] Step S20: Obtain historical security events and historical vulnerability data of the 5G network device, and predict the probability of a firewall of the 5G network device being breached based on the historical security events and the historical vulnerability data to obtain a probability prediction result.

[0067] The step S20 comprises:

[0068] Step S21, obtaining historical security events and historical vulnerability data of the 5G network device, obtaining the number of first network attacks at a first preset time according to the historical security events, and obtaining the number of first firewall breaches at a first preset time according to the historical vulnerability data;

[0069] Step S22: averaging the first network attack times to obtain a first average attack times, and calculating the probability of the firewall being breached according to the first network attack times and the first firewall being breached times to obtain a first probability;

[0070] Step S23: obtaining a second number of network attacks within a second preset time according to the historical security events, averaging the second number of network attacks to obtain a second average number of attacks, and determining an attack number trend of the second number of network attacks within the second preset time;

[0071] Step S24: compare the first average number of attacks with the second average number of attacks to obtain a comparison result, and predict the probability of the firewall being breached based on the comparison result, the trend of the number of attacks and the first probability to obtain a probability prediction result.

[0072] Specifically, in order to effectively predict the probability of a 5G network device firewall being breached, in an embodiment of the present invention, historical security events and historical vulnerability data of the 5G network device are also analyzed. The specific analysis process is to obtain the historical security events and historical vulnerability data of the 5G network device, retrieve the first number of network attacks at a first preset time (for example, the past three months) according to the historical security events, and retrieve the first number of firewall breaches at the first preset time according to the historical vulnerability data; then, it is necessary to calculate the average number of network attacks on the 5G network device per day in the past three months, that is, average the first number of network attacks to obtain the first average number of attacks; then calculate the probability of the firewall of the 5G network device being breached in the past three months, that is, according to The probability of the firewall being breached is calculated based on the first number of network attacks and the number of times the first firewall is breached to obtain a first probability; then, the second number of network attacks in a second preset time (for example, the past three days) is obtained based on the historical security events, the second number of network attacks is averaged to obtain a second average number of attacks, and the trend of the number of network attacks encountered by the 5G network device in the past three days is determined, that is, the trend of the number of network attacks within the second preset time is determined; then, the first average number of attacks is compared with the second average number of attacks to obtain a comparison result, and the probability of the firewall being breached is predicted based on the comparison result, the trend of the number of attacks and the first probability to obtain a probability prediction result.

[0073] The difference between the comparison result and the trend of the number of attacks leads to a different method for predicting the probability of the firewall being breached. Specifically, if the comparison result shows that the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to a first formula to obtain a probability prediction result, and the first formula is: W=W1×(1+10%×(BA)); if the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to a second formula to obtain a probability prediction result, and the second formula is: W=W1×(1+5%×(BA)); if the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is a zigzag state, the probability of the firewall being breached is predicted according to a third formula to obtain a probability prediction result, and the third formula is: W=W1×(1+7%×(BA)); If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to the fourth formula to obtain a probability prediction result, and the fourth formula is: W=W1×(1-5%×(AB)); if the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to the fifth formula to obtain a probability prediction result, and the fifth formula is: W=W1×(1-10%×(AB)); if the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is a zigzag state, the probability of the firewall being breached is predicted according to the sixth formula to obtain a probability prediction result, and the sixth formula is: W=W1×(1-7%×(AB)); wherein W is the predicted probability of the firewall being breached, W1 is the first probability, A is the first average number of attacks, and B is the second average number of attacks. The present invention retrieves historical security events and vulnerability data for analysis and combines it with recent network attack trends to more accurately predict the probability of the firewall of 5G network equipment being breached.

[0074] Step S30: obtaining the stage data of the target object corresponding to the 5G network device, performing classification processing on the stage data, and obtaining a stage classification result.

[0075] Specifically, in an embodiment of the present invention, in order to effectively predict the probability of a 5G network device firewall being breached, the stage data of enterprise A corresponding to the 5G network device is also graded, specifically, the stage data of the target object (for example, enterprise A) corresponding to the 5G network device is obtained, and the stage data is graded according to the security level of the stage data, wherein the stage data includes a stable development stage, an initial stage, an expansion stage, a listing stage, and a merger stage; if the stage data is a stable development stage, the stage data is graded as a first level; if the stage data is an initial stage, the stage data is graded as a second level; if the stage data is an expansion stage, the stage data is graded as a third level; if the stage data is a listing stage, the stage data is graded as a fourth level; if the stage data is a merger stage, the stage data is graded as a fifth level, and the safety factor of the first level is higher than that of the second level, the safety factor of the second level is higher than that of the third level, the safety factor of the third level is higher than that of the fourth level, and the safety factor of the fourth level is higher than that of the fifth level.

[0076] The basis for the classification in the present invention is that in the initial stage, there is often a lack of sufficient funds and resources to establish a complete network security system, so it is more vulnerable to attacks; the expansion stage means that with the development of the enterprise and the expansion of the business scale, the corresponding network security system will also be strengthened and improved, and the security will be improved compared to the primary stage; and the listing stage and the merger stage are similar; the stable development stage means that the development of the enterprise is relatively stable, the network security system is relatively complete, and the possibility of encountering attacks is small. The present invention also uses the current development stage of the enterprise as a reference value, which can further improve the network security risk assessment results.

[0077] Step S40: Perform a network risk assessment on the 5G network equipment according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result.

[0078] Specifically, in an embodiment of the present invention, after obtaining the information loss value, the probability prediction result and the stage classification result, it is necessary to perform a network security risk assessment on the 5G network equipment. The specific assessment process is to assign a weight value to the information loss value to obtain a first weight value. For example, the first weight value can be set according to the ratio of the total loss value to the preset loss amount; then, assign a weight value to the probability prediction result to obtain a second weight value. For example, the second weight value can be set according to the ratio of the predicted probability of the probability prediction result to the preset probability; then, assign a weight value to the stage classification result to obtain a third weight value. For example, if the stage data is classified as the first level, the assigned weight value is 1; if the stage data is classified as the second level, the assigned weight value is 1.5; if the stage data is classified as the third level, the assigned weight value is 2; if the stage data is classified as the fourth level, the assigned weight value is 2.5; if the stage data is classified as the fifth level, the assigned weight value is 3.

[0079] Subsequently, the target risk parameter value of the 5G network device is calculated according to the first weight value, the second weight value and the third weight value, that is, the first weight value, the second weight value and the third weight value are added; the target risk parameter value is compared with the preset value by multiples to obtain a numerical comparison result; if the target risk parameter value is less than one times the preset value, the evaluation result of the 5G network device is determined to be a first-level risk; if the target risk parameter value is greater than or equal to one times the preset value, and less than three times the preset value, the evaluation result of the 5G network device is determined to be a second-level risk; if the target risk parameter value is greater than or equal to three times the preset value, the evaluation result of the 5G network device is determined to be a third-level risk, wherein the risk level of the first-level risk is lower than that of the second-level risk, and the risk level of the second-level risk is lower than that of the third-level risk. The network security risk assessment of 5G network devices in multiple aspects of the present invention can effectively improve the probability of predicting that the firewall is breached, thereby improving the accuracy of the network security risk assessment results to ensure the security of network devices.

[0080] Furthermore, in an embodiment of the present invention, if there is a risk in the corresponding evaluation result, an early warning reminder is required. Specifically, if the evaluation result of the 5G network device is a level one risk, a level one early warning message is generated, and the technical personnel are reminded to upgrade the network security protection measures according to the level one early warning message; if the evaluation result of the 5G network device is a level two risk, a level two early warning message is generated, and the 5G network device is disconnected from the network according to the level two early warning message, and the technical personnel are reminded to upgrade the network security protection measures; if the evaluation result of the 5G network device is a level three risk, a level three early warning message is generated, and the 5G network device is powered off and disconnected from the network according to the level three early warning message, and the technical personnel are reminded to replace the network security protection measures; the present invention issues corresponding early warning reminders to promptly notify the technical personnel to take countermeasures when risks occur, thereby reducing or avoiding losses.

[0081] Furthermore, if Figure 2 As shown, based on the above-mentioned network security risk assessment method based on 5G network, the present invention also provides a network security risk assessment system based on 5G network, wherein the network security risk assessment system based on 5G network includes:

[0082] The loss value setting module 51 is used to obtain data information of the 5G network device, perform loss value setting on the data information, and obtain an information loss value;

[0083] The probability prediction module 52 is used to obtain the historical security events and historical vulnerability data of the 5G network device, and predict the probability of the firewall of the 5G network device being breached according to the historical security events and the historical vulnerability data to obtain a probability prediction result;

[0084] The stage classification module 53 is used to obtain the stage data of the target object corresponding to the 5G network device, perform classification processing on the stage data, and obtain a stage classification result;

[0085] The risk assessment module 54 is used to perform a network risk assessment on the 5G network equipment according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result.

[0086] Furthermore, if Figure 3 As shown, based on the above-mentioned network security risk assessment method based on 5G network, the present invention also provides a terminal accordingly, and the terminal includes a processor 10, a memory 20 and a display 30. Figure 3 Only some components of the terminal are shown, but it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0087] The memory 20 may be an internal storage unit of the terminal in some embodiments, such as a hard disk or memory of the terminal. The memory 20 may also be an external storage device of the terminal in other embodiments, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (SecureDigital, SD) card, a flash card (Flash Card), etc. equipped on the terminal. Further, the memory 20 may also include both an internal storage unit of the terminal and an external storage device. The memory 20 is used to store application software and various types of data installed on the terminal, such as the program code of the installation terminal. The memory 20 may also be used to temporarily store data that has been output or is to be output. In one embodiment, a network security risk assessment program 40 based on a 5G network is stored on the memory 20, and the network security risk assessment program 40 based on a 5G network can be executed by the processor 10, thereby realizing the network security risk assessment method based on a 5G network in the present application.

[0088] In some embodiments, the processor 10 may be a central processing unit (CPU), a microprocessor or other data processing chip, used to run the program code or process data stored in the memory 20, such as executing the 5G network-based network security risk assessment method.

[0089] In some embodiments, the display 30 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch device, etc. The display 30 is used to display information on the terminal and to display a visual user interface. The components of the terminal communicate with each other via a system bus.

[0090] In one embodiment, when the processor 10 executes the 5G network-based network security risk assessment program 40 in the memory 20, the following steps are implemented:

[0091] Acquire data information of 5G network equipment, perform loss determination on the data information, and obtain an information loss value;

[0092] Obtaining historical security events and historical vulnerability data of the 5G network device, and predicting the probability of a firewall of the 5G network device being breached based on the historical security events and the historical vulnerability data to obtain a probability prediction result;

[0093] Acquire stage data of the target object corresponding to the 5G network device, perform grading processing on the stage data, and obtain a stage grading result;

[0094] A network risk assessment is performed on the 5G network equipment according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result.

[0095] The step of obtaining data information of a 5G network device and performing loss determination on the data information to obtain an information loss value specifically includes:

[0096] Acquire data information of a 5G network device, and perform a first loss calculation, a second loss calculation, and a third loss calculation on information leakage of the data information according to a loss type to obtain a first damage value, a second loss value, and a third loss value;

[0097] The first loss value, the second loss value and the third loss value are combined to obtain a total loss value, and the total loss value is marked to obtain an information loss value.

[0098] The acquiring of historical security events and historical vulnerability data of the 5G network device, and predicting the probability of a firewall of the 5G network device being breached according to the historical security events and the historical vulnerability data to obtain a probability prediction result specifically includes:

[0099] Obtain historical security events and historical vulnerability data of the 5G network device, obtain the number of first network attacks at a first preset time according to the historical security events, and obtain the number of first firewall breaches at a first preset time according to the historical vulnerability data;

[0100] Calculating an average of the first network attack times to obtain a first average attack times, and calculating a probability of the firewall being breached according to the first network attack times and the first firewall being breached times to obtain a first probability;

[0101] Acquire a second number of network attacks within a second preset time according to the historical security events, average the second number of network attacks to obtain a second average number of attacks, and determine an attack number trend of the second number of network attacks within the second preset time;

[0102] The first average number of attacks is compared with the second average number of attacks to obtain a comparison result, and the probability of the firewall being breached is predicted based on the comparison result, the trend of the number of attacks and the first probability to obtain a probability prediction result.

[0103] The predicting of the probability of the firewall being breached according to the comparison result and the first probability to obtain a probability prediction result specifically includes:

[0104] If the comparison result is that the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to a first formula to obtain a probability prediction result, and the first formula is: W=W1×(1+10%×(BA));

[0105] If the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to a second formula to obtain a probability prediction result, and the second formula is: W=W1×(1+5%×(BA));

[0106] If the first average attack number is less than the second average attack number, and the attack number trend is in a zigzag state, the probability of the firewall being breached is predicted according to a third formula to obtain a probability prediction result, and the third formula is: W=W1×(1+7%×(BA));

[0107] If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to the fourth formula to obtain a probability prediction result, and the fourth formula is: W=W1×(1-5%×(AB));

[0108] If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to the fifth formula to obtain a probability prediction result, and the fifth formula is: W=W1×(1-10%×(AB));

[0109] If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is in a zigzag state, the probability of the firewall being breached is predicted according to the sixth formula to obtain a probability prediction result, and the sixth formula is: W=W1×(1-7%×(AB));

[0110] Among them, W is the predicted probability of the firewall being breached, W1 is the first probability, A is the first average number of attacks, and B is the second average number of attacks.

[0111] The stage grading results include the first level, the second level, the third level, the fourth level and the fifth level;

[0112] The step of obtaining the stage data of the target object corresponding to the 5G network device and performing classification processing on the stage data to obtain a stage classification result specifically includes:

[0113] Obtaining stage data of the target object corresponding to the 5G network device, and grading the stage data according to the security level of the stage data, wherein the stage data includes a stable development stage, a start-up stage, an expansion stage, a listing stage, and a merger stage;

[0114] If the stage data is a stable development stage, the stage data is graded as the first level;

[0115] If the stage data is the initial stage, the stage data is classified as the second level;

[0116] If the stage data is the expansion stage, the stage data is classified as the third level;

[0117] If the stage data is at the listing stage, the stage data is classified as the fourth level;

[0118] If the stage data is a merging stage, the stage data is graded as the fifth level.

[0119] The assessment results include level one risk, level two risk and level three risk;

[0120] The network risk assessment of the 5G network equipment is performed according to the information loss value, the probability prediction result and the stage classification result to obtain the assessment result, specifically including:

[0121] Assigning weight values ​​to the information loss value, the probability prediction result, and the stage grading result respectively to obtain a first weight value, a second weight value, and a third weight value;

[0122] Calculate a target risk parameter value of the 5G network device according to the first weight value, the second weight value, and the third weight value, and compare the target risk parameter value with a preset value by multiples to obtain a numerical comparison result;

[0123] If the target risk parameter value is less than one times the preset value, the assessment result of the 5G network device is determined to be a level one risk;

[0124] If the target risk parameter value is greater than or equal to one times the preset value and less than three times the preset value, the assessment result of the 5G network device is determined to be a level 2 risk;

[0125] If the target risk parameter value is greater than or equal to three times the preset value, the assessment result of the 5G network equipment is determined to be a level three risk.

[0126] Wherein, the network risk assessment of the 5G network equipment is performed according to the information loss value, the probability prediction result and the stage classification result to obtain the assessment result, and then further includes:

[0127] If the assessment result of the 5G network equipment is a level one risk, a level one warning message is generated, and the technical personnel are reminded to upgrade the network security protection measures according to the level one warning message;

[0128] If the assessment result of the 5G network equipment is a level 2 risk, a level 2 warning message is generated, the 5G network equipment is disconnected from the network according to the level 2 warning message, and the technical personnel are reminded to upgrade the network security protection measures;

[0129] If the assessment result of the 5G network equipment is a level 3 risk, a level 3 warning message is generated, and the 5G network equipment is powered off and disconnected from the network according to the level 3 warning message, and the technical staff is reminded to replace the network security protection measures.

[0130] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a network security risk assessment program based on a 5G network, and when the network security risk assessment program based on a 5G network is executed by a processor, the steps of the network security risk assessment method based on a 5G network as described above are implemented.

[0131] In summary, the present invention provides a network security risk assessment method, system and terminal based on 5G network, the method comprising: obtaining data information of 5G network equipment, performing loss determination on data information to obtain information loss value; obtaining historical security events and historical vulnerability data of 5G network equipment, predicting the probability of the firewall of the 5G network equipment being breached according to the historical security events and historical vulnerability data, and obtaining probability prediction results; obtaining stage data of the target object corresponding to the 5G network equipment, performing classification processing on the stage data to obtain stage classification results; performing network risk assessment on the 5G network equipment according to the information loss value, probability prediction results and stage classification results, and obtaining assessment results. The present invention can effectively improve the probability of predicting that the firewall is breached, thereby improving the accuracy of the network security risk assessment results to ensure the security of network equipment.

[0132] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or terminal including the element.

[0133] Of course, those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware (such as a processor, a controller, etc.) through a computer program, and the program can be stored in a computer-readable storage medium that can be read by a computer, and the program can include the processes of the above-mentioned method embodiments when executed. The computer-readable storage medium can be a memory, a disk, an optical disk, etc.

[0134] It should be understood that the application of the present invention is not limited to the above examples. For ordinary technicians in this field, improvements or changes can be made based on the above description. All these improvements and changes should fall within the scope of protection of the claims attached to the present invention.

Claims

1. A network security risk assessment method based on 5G network, characterized in that: The network security risk assessment method based on 5G network includes: Acquire data information of 5G network equipment, perform loss determination on the data information, and obtain an information loss value; Obtaining historical security events and historical vulnerability data of the 5G network device, and predicting the probability of a firewall of the 5G network device being breached based on the historical security events and the historical vulnerability data to obtain a probability prediction result; Acquire stage data of the target object corresponding to the 5G network device, perform grading processing on the stage data, and obtain a stage grading result; A network risk assessment is performed on the 5G network equipment according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result.

2. The network security risk assessment method based on 5G network according to claim 1 is characterized in that: The obtaining of data information of the 5G network device and performing loss determination on the data information to obtain an information loss value specifically includes: Acquire data information of a 5G network device, and perform a first loss calculation, a second loss calculation, and a third loss calculation on information leakage of the data information according to a loss type to obtain a first damage value, a second loss value, and a third loss value; The first loss value, the second loss value and the third loss value are combined to obtain a total loss value, and the total loss value is marked to obtain an information loss value.

3. The network security risk assessment method based on 5G network according to claim 1 is characterized in that: The obtaining of historical security events and historical vulnerability data of the 5G network device, and predicting the probability of a firewall of the 5G network device being breached according to the historical security events and the historical vulnerability data, to obtain a probability prediction result, specifically includes: Obtain historical security events and historical vulnerability data of the 5G network device, obtain the number of first network attacks at a first preset time according to the historical security events, and obtain the number of first firewall breaches at a first preset time according to the historical vulnerability data; Calculating an average of the first network attack times to obtain a first average attack times, and calculating a probability of the firewall being breached according to the first network attack times and the first firewall being breached times to obtain a first probability; Acquire a second number of network attacks within a second preset time according to the historical security events, average the second number of network attacks to obtain a second average number of attacks, and determine an attack number trend of the second number of network attacks within the second preset time; The first average number of attacks is compared with the second average number of attacks to obtain a comparison result, and the probability of the firewall being breached is predicted based on the comparison result, the trend of the number of attacks and the first probability to obtain a probability prediction result.

4. The network security risk assessment method based on 5G network according to claim 3 is characterized in that: The predicting the probability of the firewall being breached according to the comparison result and the first probability to obtain a probability prediction result specifically includes: If the comparison result is that the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to a first formula to obtain a probability prediction result, and the first formula is: W=W1×(1+10%×(BA)); If the first average number of attacks is less than the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to a second formula to obtain a probability prediction result, and the second formula is: W=W1×(1+5%×(BA)); If the first average attack number is less than the second average attack number, and the attack number trend is in a zigzag state, the probability of the firewall being breached is predicted according to a third formula to obtain a probability prediction result, and the third formula is: W=W1×(1+7%×(BA)); If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is an upward trend, the probability of the firewall being breached is predicted according to the fourth formula to obtain a probability prediction result, and the fourth formula is: W=W1×(1-5%×(AB)); If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is a downward trend, the probability of the firewall being breached is predicted according to the fifth formula to obtain a probability prediction result, and the fifth formula is: W=W1×(1-10%×(AB)); If the first average number of attacks is greater than or equal to the second average number of attacks, and the trend of the number of attacks is in a zigzag state, the probability of the firewall being breached is predicted according to the sixth formula to obtain a probability prediction result, and the sixth formula is: W=W1×(1-7%×(AB)); Among them, W is the predicted probability of the firewall being breached, W1 is the first probability, A is the first average number of attacks, and B is the second average number of attacks.

5. The network security risk assessment method based on 5G network according to claim 1 is characterized in that: The stage grading results include the first level, the second level, the third level, the fourth level and the fifth level; The step of obtaining the stage data of the target object corresponding to the 5G network device and performing classification processing on the stage data to obtain a stage classification result specifically includes: Obtaining stage data of the target object corresponding to the 5G network device, and grading the stage data according to the security level of the stage data, wherein the stage data includes a stable development stage, a start-up stage, an expansion stage, a listing stage, and a merger stage; If the stage data is a stable development stage, the stage data is graded as the first level; If the stage data is the initial stage, the stage data is classified as the second level; If the stage data is the expansion stage, the stage data is classified as the third level; If the stage data is at the listing stage, the stage data is classified as the fourth level; If the stage data is a merging stage, the stage data is graded as the fifth level.

6. The network security risk assessment method based on 5G network according to claim 1 is characterized in that: The assessment results include level one risk, level two risk and level three risk; The network risk assessment of the 5G network equipment is performed according to the information loss value, the probability prediction result and the stage classification result to obtain the assessment result, specifically including: Assigning weight values ​​to the information loss value, the probability prediction result, and the stage grading result respectively to obtain a first weight value, a second weight value, and a third weight value; Calculate a target risk parameter value of the 5G network device according to the first weight value, the second weight value, and the third weight value, and compare the target risk parameter value with a preset value by multiples to obtain a numerical comparison result; If the target risk parameter value is less than one times the preset value, the assessment result of the 5G network device is determined to be a level one risk; If the target risk parameter value is greater than or equal to one times the preset value and less than three times the preset value, the assessment result of the 5G network device is determined to be a level 2 risk; If the target risk parameter value is greater than or equal to three times the preset value, the assessment result of the 5G network equipment is determined to be a level three risk.

7. The network security risk assessment method based on 5G network according to claim 1 is characterized in that: The step of performing a network risk assessment on the 5G network device according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result further includes: If the assessment result of the 5G network equipment is a level one risk, a level one warning message is generated, and the technical personnel are reminded to upgrade the network security protection measures according to the level one warning message; If the assessment result of the 5G network equipment is a level 2 risk, a level 2 warning message is generated, the 5G network equipment is disconnected from the network according to the level 2 warning message, and the technical personnel are reminded to upgrade the network security protection measures; If the assessment result of the 5G network equipment is a level 3 risk, a level 3 warning message is generated, and the 5G network equipment is powered off and disconnected from the network according to the level 3 warning message, and the technical staff is reminded to replace the network security protection measures.

8. A network security risk assessment system based on 5G network, characterized in that: The network security risk assessment system based on 5G network includes: A loss setting module is used to obtain data information of 5G network equipment, perform loss setting on the data information, and obtain an information loss value; A probability prediction module is used to obtain historical security events and historical vulnerability data of the 5G network device, and predict the probability of the firewall of the 5G network device being breached according to the historical security events and the historical vulnerability data to obtain a probability prediction result; A stage classification module is used to obtain the stage data of the target object corresponding to the 5G network device, perform classification processing on the stage data, and obtain a stage classification result; A risk assessment module is used to perform a network risk assessment on the 5G network equipment according to the information loss value, the probability prediction result and the stage classification result to obtain an assessment result.

9. A terminal, characterized in that: The terminal includes: a memory, a processor, and a 5G network-based network security risk assessment program stored in the memory and executable on the processor. When the 5G network-based network security risk assessment program is executed by the processor, the steps of the 5G network-based network security risk assessment method as described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a 5G network-based network security risk assessment program, and when the 5G network-based network security risk assessment program is executed by a processor, the steps of the 5G network-based network security risk assessment method as described in any one of claims 1-7 are implemented.

Images