Rectification recommendation method and equipment in grade protection evaluation process

Abstract

The invention discloses a rectification recommendation method and equipment in a grade protection evaluation process. The method comprises the following steps: S1, acquiring a tested object set and a rectification measure set; s2, on the basis of the evaluation items, the added values of the tested objects in the current tested object set after being rectified by the rectification measures in the current rectification measure set are calculated respectively; s3, determining the influence of the current rectification measure set on the tested object in the current tested object set according to the added value; and S4, determining an optimal rectification measure according to the influence, updating the current tested object set and the current rectification measure set, and then returning to the step S2 to continue execution until the updated tested object set is empty, thereby obtaining an optimal rectification measure set. According to the method, the evaluation personnel can be assisted to rectify a plurality of tested objects by using the least rectification measures, so that the rectification efficiency is improved, and the scientificity and effectiveness of the rectification measures are ensured.

Description

Technical Field

[0001] The present invention belongs to the field of computer technology, and particularly relates to a rectification recommendation method and device in the process of classified protection assessment. Background Art

[0002] With the increasing attention of the country to network security, more and more information systems have been included in the scope of classified protection assessment requirements. However, in actual operation, classified protection assessment agencies often face a challenge: they need to assess multiple objects to be measured at the same time, and each object to be measured has multiple problems to be rectified. Facing such a complex scenario of multiple objects to be measured and multiple problems to be rectified, assessors often feel at a loss and find it difficult to find the optimal rectification path to enable all objects to be measured to reach the target score at the fastest speed simultaneously. In the case of a single object to be measured, the conventional approach is to prioritize solving high-risk and high-weight problems to improve the score and conclusion of the classified protection assessment. However, when facing multiple objects to be measured, how to comprehensively consider the problems of all objects and reasonably select rectification measures among them to quickly formulate an optimal rectification path is usually a challenge and highly dependent on the experience accumulation of assessors. That is to say, there is an urgent need for an efficient rectification recommendation method for the complex scenario of multiple objects to be measured and multiple problems to be rectified. Summary of the Invention

[0003] To solve the above problems existing in the prior art, the present invention provides a rectification recommendation method and device in the process of classified protection assessment.

[0004] The technical problems to be solved by the present invention are realized through the following technical solutions:

[0005] The present invention provides a rectification recommendation method in the process of classified protection assessment, including:

[0006] S1. Obtain a set of objects to be measured including b objects to be measured and a set of rectification measures including n rectification measures; each object to be measured has multiple assessment items;

[0007] S2. Based on the multiple assessment items of each object to be measured in the current set of objects to be measured, calculate the additional score values obtained after each object to be measured is rectified by each rectification measure in the current set of rectification measures respectively, and obtain an overall additional score value matrix; n and n are positive integers greater than 1;

[0008] S3. According to the overall additional score value matrix, determine the influence of the current set of rectification measures on all objects to be measured in the current set of objects to be measured, and obtain an influence summary matrix;

[0009] S4. Determine an optimal rectification measure according to the impact summary matrix, update the current set of objects under test and the current set of rectification measures based on the optimal rectification measure, and then return to S2 above to continue execution until the updated set of objects under test is empty, and an optimal set of rectification measures is obtained.

[0010] The present invention also provides an electronic device, including a processor, a communication interface, a memory, and a communication bus. The processor, the communication interface, and the memory complete communication with each other through the communication bus.

[0011] The memory is used to store a computer program.

[0012] When the processor is used to execute the program stored in the memory, the steps of the rectification recommendation method in the above-mentioned classified protection assessment process are implemented.

[0013] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0014] The present invention proposes a rectification recommendation method in the classified protection assessment process. This method is specifically aimed at assessment projects involving multiple objects under test and complex problems encountered during the rectification process. Through multiple iterations, an optimal rectification plan can be quickly generated, which can help assessors quickly identify common problems of multiple objects under test and provide targeted rectification measure suggestions. Thus, it can assist assessors to rectify multiple objects under test with the fewest rectification measures, not only improving the rectification efficiency, but also ensuring the scientificity and effectiveness of the rectification measures, and reducing the dependence on the personal experience of assessors to a certain extent during the rectification process of complex scenarios.

[0015] The following will further describe the present invention in detail with reference to the accompanying drawings and specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 is a flowchart of a rectification recommendation method in the classified protection assessment process provided by an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0017] The following further describes the present invention in detail with specific embodiments, but the embodiments of the present invention are not limited thereto.

[0018] Before introducing the technical solution of the present invention, the determination basis and scoring formula of the classified protection assessment conclusion of a single object under test are first introduced.

[0019] The determination basis of the classified protection assessment conclusion of a single object under test is shown in Table 1:

[0020] Table 1

[0021]

[0022] The comprehensive score calculation method is as follows:

[0023] Let M be the comprehensive score of the object under test, M = V t + V m , V t and V m are calculated according to the following formula:

[0024]

[0025]

[0026] Among them, y is the attention coefficient, with a value between 0 and 1, given by the hierarchical protection work management department, and the default value is 0.5. n is the total number of evaluation items involved in the object under test (excluding non-applicable items, the same below), t is the total number of evaluation items corresponding to the technical aspect, V t is the score of the technical aspect, m is the total number of evaluation items corresponding to the management aspect, V m is the score of the management aspect, ω k is the importance level of evaluation item k (divided into general, important, and critical), x k is the score of evaluation item k. If evaluation item k involves multiple evaluation objects, then x k takes the arithmetic mean of the scores of multiple evaluation objects.

[0027] The score calculation of x k is shown in Table 2:

[0028] Table 2

[0029]

[0030] Among them, when evaluation item k involves multiple objects, the score value for each object is 1, 0.5, and 0.

[0031] Based on the fact that the minimum condition for successfully passing the evaluation is that the comprehensive score is greater than or equal to 70 points and there are no high risks, which means that the sum of the deduction scores for the management category and the technical category should be less than or equal to 30 points. Therefore, in the subsequent method introduction of the present invention, the situation where the deduction score for the technical category or the management category is greater than or equal to 50 points is not considered.

[0032] Figure 1 is a schematic flow chart of a rectification recommendation method in the process of hierarchical protection evaluation provided by an embodiment of the present invention. As Figure 1 shown, the method includes:

[0033] S1. Obtain a set of objects under test containing n objects under test and a set of rectification measures containing m rectification measures; each object under test has multiple evaluation items.

[0034] S2. Based on multiple evaluation items of each object under test in the current set of objects under test, calculate the bonus points obtained after each rectification measure in the current set of rectification measures is used to rectify the object under test, respectively, to obtain an overall bonus points matrix; n and m are positive integers greater than 1.

[0035] S3. According to the overall bonus points matrix, determine the impact of the current set of rectification measures on all objects under test in the current set of objects under test, to obtain an impact summary matrix.

[0036] S4. Determine an optimal rectification measure according to the impact summary matrix, and update the current set of objects under test and the current set of rectification measures based on the optimal rectification measure. Then, return to S2 above and continue to execute until the updated set of objects under test is empty, and stop to obtain an optimal set of rectification measures.

[0037] In some embodiments, the above S2 is implemented through the following steps:

[0038] S21. Based on multiple evaluation items of each object under test in the current set of objects under test, calculate the score of the object under test before rectification.

[0039] Here, the score V j before rectification of the j-th object under test is expressed as follows:

[0040]

[0041] where represents the score before rectification of the k j -th evaluation item of the j-th object under test, the value range of j is from 1 to O, and O represents the total number of objects under test in the current set of objects under test. When the current set of objects under test is the set of objects under test in S1 above, then O = n. n j represents the total number of evaluation items of the j-th object under test, k j represents the k j -th evaluation item of the j-th object under test, represents the importance degree of the k j -th evaluation item of the j-th object under test. It should be noted that is calculated in the same way as the above x k is calculated in the same way as the above ω is calculated in the same way as the above ω k is calculated in the same way as the above ω, specifically being general or important or critical.

[0042] S22. Calculate the post - rectification score of the j - th measured object for the k - th evaluation item after rectification by each rectification measure in the current set of rectification measures, based on the rectification effect of each rectification measure on each evaluation item of the measured object. Calculate the post - rectification score of the measured object after rectification by this rectification measure, based on the post - rectification scores of all evaluation items of the measured object after rectification by this rectification measure.

[0043] Here, the rectification effect f(∝ j , k i ) of the i - th rectification measure in the current set of rectification measures on the k - th evaluation item of the j - th measured object includes one of the following effects: ineffective, partially compliant, and compliant. Ineffective means that this rectification measure is ineffective for this evaluation item; partially compliant means that this rectification measure can rectify it to partially compliant when this indicator is non - compliant; compliant means that this rectification measure can rectify it to compliant when this indicator is partially compliant or non - compliant. f(∝ j , k i ) is expressed as: j ) Among them, the value range of i is from 1 to Z, where Z represents the total number of rectification measures in the current set of rectification measures. When the current set of rectification measures is the set of rectification measures in S1 above, then Z = m.

[0044] Here, the post - rectification score j of the k - th evaluation item of the j - th measured object after rectification by the i - th rectification measure is expressed as follows:

[0045]

[0046] Among them, represents the number of non - compliant measured objects involved in the k - th evaluation item, j and represents the total number of measured objects involved in the k - th evaluation item. j

[0047] Here, the post - rectification score V ij of the j - th measured object after rectification by the i - th rectification measure is expressed as follows:

[0048]

[0049] S23. Calculate the difference between the post - rectification score and the pre - rectification score of the measured object after rectification by each rectification measure in the current set of rectification measures respectively, to obtain the bonus points corresponding one - to - one with each rectification measure in the current set of rectification measures for the measured object; among them, the bonus points of all measured objects in the current set of measured objects form an overall bonus - point matrix.

[0050] Here, the bonus value corresponding one-to-one between the j-th object under test and the i-th rectification measure is: ΔV ij =V ij -V j .

[0051] Here, when the current set of rectification measures is the set of rectification measures in S1 above, and the current set of objects under test is the set of objects under test in S1 above, then an overall bonus value matrix ΔV obtained can be expressed as: where the value of i' ranges from 2 to m, and the value of j' ranges from 2 to n.

[0052] In some embodiments, the above S3 is implemented through the following steps:

[0053] S31. According to the overall bonus value matrix, determine the number of objects under test that each rectification measure in the current set of rectification measures can affect, and the sum of the bonus values corresponding one-to-one between the objects under test that the rectification measure can affect and the rectification measure, to obtain a row matrix of the rectification measure; the row matrix is composed of the number of objects under test that the rectification measure can affect and the sum of the bonus values.

[0054] Here, the i-th row of the overall bonus value matrix is the bonus value corresponding one-to-one between all the objects under test in the current set of objects under test and the i-th rectification measure in the current set of rectification measures; based on this, specifically, the number of non-zero elements in the i-th row of the overall bonus value matrix is used as the number of objects under test that the i-th rectification measure can affect, num i , that is, num i =nnz(ΔV(i,:)), where ΔV represents the overall bonus value matrix; the sum of the non-zero elements in the i-th row of the overall bonus value matrix is used as the sum of the bonus values corresponding one-to-one between the objects under test that the i-th rectification measure can affect and the i-th rectification measure, ΔSumV i , that is After that, a row matrix with 2 elements formed by num i and ΔSumV i , [num i ΔSumV i , is used as a row matrix of the i-th rectification measure.

[0055] S32. Use the row matrices of all the rectification measures in the current set of rectification measures to form an influence summary matrix with Z rows and 2 columns, where Z represents the total number of rectification measures in the current set of rectification measures.

[0056] Here, when the current set of rectification measures is the set of rectification measures in S1 above, and the current set of objects to be measured is the set of objects to be measured in S1 above, the obtained impact summary matrix correction can be expressed as: Among them, the value range of i′ is from 2 to m, and the value range of j′ is from 2 to n.

[0057] In some embodiments, determining an optimal rectification measure according to the impact summary matrix in S4 above can be achieved through the following steps:

[0058] S41. Based on the magnitudes of the elements in the first column, perform a reverse sorting on the impact summary matrix; and when two or more elements in the first column are the same, based on the magnitudes of the elements in the second column of the impact summary matrix that are in the same positions as these two or more elements, perform a second reverse sorting on the impact matrix.

[0059] S42. After sorting the impact matrix, obtain the sorted impact summary matrix; among them, each row of the sorted impact summary matrix corresponds one-to-one with a rectification measure in the current set of rectification measures;

[0060] S43. Take a rectification measure corresponding to the elements in the first row of the sorted impact summary matrix as the optimal rectification measure.

[0061] Specifically, for correction, sort it in descending order according to num. If the magnitudes of num are the same, then sort it according to ΔSumV. Finally, obtain a new impact summary matrix correction_sort. The rectification measure in the first row of correction_sort is the rectification measure that takes effect on more objects to be measured, and it is also a rectification measure that improves the score more overall. Therefore, an optimal rectification measure that affects the largest number of objects to be measured and has the highest rectification score improvement is found, and this rectification measure is the optimal rectification measure.

[0062] In some embodiments, updating the current set of objects to be measured and the current set of rectification measures based on the optimal rectification measure in S4 above can be achieved through the following steps:

[0063] S44. Remove the optimal rectification measure from the current set of rectification measures to obtain the updated current set of rectification measures, and add the optimal rectification measure to the optimal rectification measure set correction_path.

[0064] S45. Calculate the new rectification score of each object to be measured in the current set of objects to be measured after rectification by the optimal rectification measure.

[0065] It should be noted that after rectifying a measured object with the optimal rectification measure, the calculation principle of the new rectification score of the measured object is the above-mentioned v ij calculation principle.

[0066] S46. Determine whether the new rectification score of the measured object is greater than or equal to the expected score V_target of the measured object.

[0067] It should be noted that the expected score V_target of each measured object is set by the user according to actual needs, and the expected scores V_target of different measured objects can be the same or different.

[0068] S47. When the new rectification score of the measured object is greater than or equal to the expected score of the measured object, remove the measured object from the current set of measured objects to obtain the updated current set of measured objects.

[0069] S48. When the new rectification score of the measured object is less than the expected score of the measured object, use the current set of measured objects as the updated current set of measured objects.

[0070] It should be noted that when the updated current set of measured objects is empty, it means that at this time, the scores of all measured objects in the initially obtained set of measured objects have reached the expected scores, that is, all the optimal rectification measures in the finally obtained set of optimal rectification measures are measures that can effectively rectify all the measured objects in the initially obtained set of measured objects.

[0071] Based on the evaluation project of multiple measured objects, the present invention proposes an intelligent rectification recommendation method, which can effectively obtain the shortest rectification path after multiple iterations, assist the evaluators to rectify multiple measured objects with the least rectification measures, and improve the rectification efficiency. Thus, to a certain extent, it reduces the dependence on the personal experience of the evaluators during the rectification process in this complex scenario.

[0072] It should be noted that the terms "first" and "second" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, the features defined with "first" and "second" may explicitly or implicitly include one or more features. In the description of the present invention, "a plurality" means two or more, unless otherwise specifically defined.

[0073] In the description of this specification, the description with reference to terms such as "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features or characteristics described can be combined in a suitable manner in any one or more embodiments or examples. In addition, those skilled in the art can combine and combine the different embodiments or examples described in this specification.

[0074] In the specification, the term "including" does not exclude other components or steps, and the use of "a" or "one" does not exclude the case of multiple. Certain measures are described in different embodiments, but this does not mean that these measures cannot be combined to produce good results.

[0075] The above content is a further detailed description of the present invention in combination with specific preferred embodiments, and it cannot be determined that the specific implementation of the present invention is only limited to these descriptions. For those of ordinary skill in the technical field to which the present invention pertains, without departing from the concept of the present invention, several simple deductions or substitutions can still be made, and all should be regarded as belonging to the protection scope of the present invention.

Claims

1. A rectification recommendation method in the process of classified protection assessment, characterized in that, Including: S1. Obtain a set of objects to be measured including n objects to be measured and a set of rectification measures including m rectification measures; Each object to be measured has multiple evaluation items; S2. Based on the multiple evaluation items of each object to be measured in the current set of objects to be measured, calculate the additional score values obtained after each rectification measure in the current set of rectification measures rectifies the object to be measured respectively, and obtain an overall additional score value matrix; n and m are positive integers greater than 1; S3. According to the overall additional score value matrix, determine the influence of the current set of rectification measures on all objects to be measured in the current set of objects to be measured, and obtain an influence summary matrix; S4. Determine an optimal rectification measure according to the influence summary matrix, and update the current set of objects to be measured and the current set of rectification measures based on the optimal rectification measure. Then, return to S2 above and continue to execute until the updated set of objects to be measured is empty and stop, to obtain an optimal set of rectification measures.

2. The rectification recommendation method in the classified protection assessment process according to claim 1, wherein The S2 includes: S21. Based on the multiple evaluation items of each object to be measured in the current set of objects to be measured, calculate the score before rectification of the object to be measured; S22. According to the rectification effect of each rectification measure in the current set of rectification measures on each evaluation item of the object to be measured, calculate the score after rectification of the evaluation item of the object to be measured after being rectified by the rectification measure, and according to the scores after rectification of the multiple evaluation items of the object to be measured after being rectified by the rectification measure, calculate the score after rectification of the object to be measured after being rectified by the rectification measure; S23. Calculate the difference between the score after rectification of the object to be measured after being rectified by each rectification measure in the current set of rectification measures respectively and the score before rectification, and obtain the additional score values corresponding one-to-one to each rectification measure in the current set of rectification measures for the object to be measured; among them, the additional score values of all the objects to be measured in the current set of objects to be measured form an overall additional score value matrix.

3. The rectification recommendation method in the classified protection assessment process according to claim 2, wherein The rectification score V of the j-th measured object after rectification by the i-th rectification measure ij is expressed as follows: Among them, j ranges from 1 to O, where O represents the total number of objects under test in the current set of objects under test, i ranges from 1 to Z, where Z represents the total number of rectification measures in the current set of rectification measures, and n j represents the total number of evaluation items of the j-th object under test, and k j represents the k j -th evaluation item of the j-th object under test. represents the importance degree of the k j -th evaluation item of the j-th object under test. represents the score after rectification of the k j -th evaluation item of the j-th object under test after rectification by the i-th rectification measure.

4. The rectification recommendation method in the classified protection evaluation process according to claim 1, characterized in that The S3 includes: S31. According to the overall additional score value matrix, determine the number of objects to be measured that each rectification measure in the current set of rectification measures can affect, and the sum of the additional score values corresponding one-to-one to the objects to be measured that the rectification measure can affect, and obtain a row matrix of the rectification measure; the row matrix is composed of the number of objects to be measured that the rectification measure can affect and the sum of the additional score values; S32. Use the row matrices of all the rectification measures in the current set of rectification measures to form an influence summary matrix with Z rows and 2 columns, where Z represents the total number of rectification measures in the current set of rectification measures.

5. The rectification recommendation method in the classified protection evaluation process according to claim 4, characterized in that The i-th row of the overall additional score value matrix is the additional score values corresponding one-to-one to each object to be measured in the current set of objects to be measured and the i-th rectification measure in the current set of rectification measures; among them, the value range of i is from 1 to Z; based on this, the S31 includes: S311. Take the number of non-zero elements in the i-th row of the overall additional score value matrix as the number of objects to be measured that the i-th rectification measure can affect; S312. Take the sum of the non-zero elements in the \(i\)-th row of the overall bonus value matrix as the total bonus value corresponding to the test object that can be affected by the \(i\)-th rectification measure, which corresponds one-to-one with the \(i\)-th rectification measure; S313. Take a row matrix composed of the number of test objects that can be affected by the \(i\)-th rectification measure and the total bonus value as the row matrix of the \(i\)-th rectification measure.

6. The rectification recommendation method in the classified protection assessment process according to claim 1, wherein Determining an optimal rectification measure according to the influence summary matrix in S4 includes: S41. Based on the magnitudes of the elements in the first column, perform a reverse order sorting on the influence summary matrix; and when two or more elements in the first column are the same, based on the magnitudes of the elements in the second column of the influence summary matrix that are in the same positions as the two or more elements, perform a second reverse order sorting on the influence summary matrix; S42. After sorting the influence summary matrix, obtain the sorted influence summary matrix; where each row of the sorted influence summary matrix corresponds one-to-one with a rectification measure in the current rectification measure set; S43. Take a rectification measure corresponding to the elements in the first row of the sorted influence summary matrix as the optimal rectification measure.

7. The rectification recommendation method in the classified protection assessment process according to claim 1, wherein Updating the current test object set and the current rectification measure set based on the optimal rectification measure in S4 includes: S44. Remove the optimal rectification measure from the current rectification measure set to obtain the updated current rectification measure set, and add the optimal rectification measure to the optimal rectification measure set; S45. Calculate the new rectification score of each test object in the current test object set after the optimal rectification measure rectifies the test object; S46. Determine whether the new rectification score of the test object is greater than or equal to the expected score of the test object; S47. When the new rectification score of the test object is greater than or equal to the expected score of the test object, remove the test object from the current test object set to obtain the updated current test object set; S48. When the new rectification score of the test object is less than the expected score of the test object, take the current test object set as the updated current test object set.

8. The rectification recommendation method in the classified protection evaluation process according to claim 3, characterized in that, The score V before rectification of the j-th object to be measured j is expressed as follows: Among them, represents the score before rectification of the k j th evaluation item of the jth object to be measured.

9. The rectification recommendation method in the classified protection assessment process according to claim 2, wherein The rectification effect of the rectification measure on the evaluation item of the test object includes one of the following effects: ineffective, partially compliant, and compliant.

10. An electronic device, comprising a processor, a communication interface, a memory, and a communication bus, characterized in that, The processor, the communication interface, and the memory complete communication with each other through the communication bus; The memory is used to store computer programs; When the processor executes the programs stored on the memory, it implements the method steps described in any one of claims 1-9.

Images