An information security knowledge modeling method for intelligent devices

Abstract

The application discloses a kind of information security knowledge modeling methods for intelligent device, first the information technology work of intelligent device is abstracted as an information item to describe, according to the connection between each information technology artifact in intelligent device information technology system Information item between the adjacency matrix is obtained, to generate information technology system model;The permission and attack category of attacker are described, and the information security knowledge model of intelligent device is generated based on the extended finite state machine, and the state set and conversion set in the information security knowledge model are generated based on the information in the generated information technology system model, to complete the construction of information security knowledge model.The present application is based on the knowledge of network attack and intelligent device vulnerability, and the intelligent device is abstracted and modeled for security testing activity to obtain the intelligent device information security knowledge model, to facilitate the automatic generation of test case and other information during subsequent information security testing, to provide support for tester.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of intelligent devices, and more specifically relates to an information security knowledge modeling method for intelligent devices. BACKGROUND

[0002] An intelligent device refers to an electronic device with the capabilities of perception, calculation, connection and interaction, and has been deeply applied to various aspects of social production and life, and has become the core force driving the technological and economic development in the digital era. The information security of an intelligent device is crucial for its stable and reliable operation, and it is necessary to carry out systematic and complete information security testing to protect it from threats such as malicious attacks, data leakage and function abuse.

[0003] Currently, for intelligent devices, security testing methods such as penetration testing are usually performed by external service providers, and the testers have no prior knowledge (black box) or only limited prior knowledge (gray box) of the system. Therefore, the testers need to collect information about the target intelligent device (for example, through reverse engineering) before the actual test begins. In addition, the testing process is usually carried out by the testers at the end of the development of the intelligent device, which requires a large amount of human and material resources, resulting in time delay and cost increase. Moreover, due to the limitation of the technical level of the testers, potential vulnerabilities may be missed, resulting in serious security risks after the intelligent device is put into use. Since security testing needs to find as many vulnerabilities as possible in the system under test, the traditional penetration testing method has limitations in dealing with the complexity of intelligent devices. Therefore, it is considered to abstract and model the testing activities to support model-based testing automation. SUMMARY

[0004] The present application aims to overcome the shortcomings of the prior art and provide an information security knowledge modeling method for intelligent devices, which abstracts and models intelligent devices based on the knowledge of network attacks and intelligent device vulnerabilities to obtain an intelligent device information security knowledge model, facilitates the automatic generation of test cases and other information during subsequent information security testing, and thus provides support for testers.

[0005] To achieve the above-mentioned application purposes, the information security knowledge modeling method for intelligent devices comprises the following steps:

[0006] S1: divide the information technology artifacts of the intelligent device into three categories of components, communication systems and interfaces, and abstract each information technology artifact as an information item I i , i = 1, 2, …, N, N represents the number of information technology artifacts, and each information item I i is described as a 5-tuple:

[0007] I i = (n i,b i ,t i ,app i ,p i )

[0008] Where, n i Information item I i The name represents the identifier that describes the information item; b i Information item I i Identifiers belonging to internal or external information technology systems; t i Information item I i The corresponding information technology artifact type; app i Information item I i The corresponding application, including application name and application type; p i Information item I i The corresponding security protection 3-tuple, p i =(SP i ,SC i SA i ), SP i Information item I i The corresponding set of security attributes, SC i Information item I i Related security control set, SA i Information item I i The related asset portfolio;

[0009] S2: Based on the connection relationships between various information technology artifacts in the intelligent device information technology system, obtain the adjacency matrix M between information items. adj Thus, the information technology system model M is obtained. system =(Items,M adj ), where Items represents the collection of all information items;

[0010] S3: Grant attacker privileges M att Described as a 2-tuple:

[0011] M att =(A,δ A )

[0012] Where A represents the attacker's permission set, A = {ReadWrite, Execute, Read, Write, FullControl}, where ReadWrite represents read and write permissions, Execute represents execute permissions, Read represents read permissions, Write represents write permissions, and FullControl represents full control permissions; δ AA→P(A) denotes a mapping from a privilege to its reachable subsequent privileges, P(A) denotes the power set of the attacker's privilege set A:

[0013] δ A (ReadWrite) = {ReadWrite, Execute, Read, Write, FullControl}

[0014] δ A (Execute) = {Execute, Read, Write, FullControl}

[0015] δ A (Read) = {Execute, Read, Write, FullControl}

[0016] δ A (Write) = {ReadWrite, Execute, Read, Write, FullControl}

[0017] δ A (FullControl) = {ReadWrite, FullControl}

[0018] S4: According to the specific circumstances of the intelligent device, set the attack mode set ATT, the vulnerability set V and the threat set U, each attack mode, vulnerability and threat is provided with an attack configuration, and a combination of attack modes, vulnerabilities and threats with the same attack configuration is regarded as an attack category; the number of attack categories obtained is M, and the jth attack category is C j , j = 1, 2,..., M, and the attack category C j is described as a 9-tuple:

[0019] C j = (u j , a j , f j , v j , l j , s j , cvss j , evss j , config j )

[0020] Wherein, u j represents a threat, u j ∈ U; a j represents an attack mode, a j ∈ ATT; f j represents a parent level attack mode, if the attack mode has a parent level attack mode, fj ∈ATT, otherwise f j = 0; v j represents a vulnerability, v j ∈V; l j represents the likelihood level of the attack mode, if the current attack mode has no likelihood level in the attack mode set ATT, it is set to the default level; s j represents the severity level of the attack mode, if the current attack mode has no severity level in the attack mode set ATT, it is set to the default level; cvss j represents the CVSS rating applicable to the current attack category; evss j represents the exploitability sub-score of the CVSS rating applicable to the current attack category; config j represents the attack configuration of the current attack category;

[0021] S5: Based on the extended finite state machine, the information security knowledge model M security is described as a 6-tuple:

[0022] M security = (S,∑E,∑C,S start ,Q,T)

[0023] Wherein: S is a non-empty and finite state set, and its state number is K, each state is state k , k = 1, 2, …, K; each state state k is described as a 3-tuple:

[0024]

[0025] Wherein, i k represents the serial number of the information item corresponding to state state k , represents the information item corresponding to state state k , represents the attacker's authority of the information item corresponding to state state k , j k represents the serial number of the attack category corresponding to state state k , represents the attack configuration of the attack category corresponding to state state k ;

[0026] ∑E represents a finite set of vulnerabilities; ∑C represents a finite set of output behaviors, S start represents a non-empty initial state set generated by the attacker attacking the system, S startS; Q represents the set of state variables, the security properties violated by the attack and the level of the attack; T represents a finite set of transitions, denoted as D, each transition is tran d , d = 1, 2, …, D, each transition tran d is described as a 3-tuple:

[0027] tran d = (S source,d , S target,d , A d )

[0028] wherein S source,d ∈ S represents the source state of the transition tran d , S target,d ∈ S represents the target state of the transition tran d , and A d represents a set of attack categories applicable to the transition tran d , including at least one threat category and one technical domain;

[0029] S6: Traverse all information items in the intelligent device information technology system model, if the information item I i is a communication system or an interface, generate a state with read-write permission ReadWrite; if the information item I i is a component, generate four states for the information item, set the permissions as execution permission Excecute, read permission Read, write permission Write and full control permission FullControl, respectively;

[0030] Merge the states generated by all information items I i to obtain the state set S;

[0031] S7: Define five types of transitions, namely self-transition, transition between component states, transition from interface to communication system and vice versa, transition from interface or communication system to component, and transition from component to communication system; traverse all information items I i in the intelligent device information technology system model, generate all possible transitions according to the five types of transitions defined, for each transition, obtain its target state, then obtain the attack configuration of the target state from the state set, according to the description of the attack category, filter all attack categories matching the technical domain and threat of the target state attack configuration, to form the attack category set of the current transition, thereby obtaining the 3-tuple of the transition.

[0032] The application faces the information security knowledge modeling method of the intelligent device, first abstracts the information technology work of the intelligent device into an information item for description, obtains the adjacency matrix between the information items according to the connection relationship between various information technology workpieces in the information technology system of the intelligent device, and generates the information technology system model; the attacker permission and the attack category are described, the information security knowledge model of the intelligent device is generated based on the extended finite state machine, the state set and the conversion set in the information security knowledge model are generated based on the information in the generated information technology system model, and the construction of the information security knowledge model is completed.

[0033] The application has the following beneficial effects:

[0034] 1) In the application, the information technology workpiece of the intelligent device is abstracted into an information item, the information technology system model is generated in combination with the adjacency matrix, so that the information characteristics of the intelligent device are better reflected;

[0035] 2) The attacker permission and the attack category are described and then mapped to the system model in the application, so that the information security knowledge model containing the real network attack scene is obtained, the information security characteristics and the application environment of the intelligent device are better reflected, and better support is provided for the information security test of the intelligent device. BRIEF DESCRIPTION OF DRAWINGS

[0036] Figure 1 is the specific embodiment flowchart of the information security knowledge modeling method of the intelligent device of the application;

[0037] Figure 2 is an example diagram of possible conversion between five attacker permissions in the application;

[0038] Figure 3 is an example diagram of the attack category in the application. DETAILED DESCRIPTION

[0039] The specific embodiments of the application are described below in combination with the drawings, so that those skilled in the art can better understand the application. It needs to be specially reminded that in the following description, when the detailed description of the known functions and designs may weaken the main content of the application, these descriptions will be ignored here.

[0040] EMBODIMENT

[0041] Figure 1 is the specific embodiment flowchart of the information security knowledge modeling method of the intelligent device of the application. As shown in Figure 1 the information security knowledge modeling method of the intelligent device of the application includes the following steps:

[0042] S101: Information technology workpiece description:

[0043] Information security of smart devices needs to consider the information technology systems that may be affected by cyber attacks. In the field of smart devices, information technology systems can be divided into internal information technology systems and external information technology systems. The internal information technology system includes three types of information technology artifacts, namely components, communication systems and interfaces. The external system is represented in the environment model, including all systems that communicate with smart devices or have information technology impact at the information technology level, such as wireless communication terminals, backend servers, test equipment, etc. The information technology artifacts of external information technology systems can also be divided into three types: components, communication systems and interfaces.

[0044] Therefore, in the present application, the information technology artifacts of smart devices are divided into three types: components, communication systems and interfaces, and each information technology artifact is abstracted as an information item I i , i = 1, 2, …, N, N represents the number of information technology artifacts, and each information item I i is described as a 5-tuple:

[0045] I i = (n i , b i , t i , app i , p i )

[0046] wherein,

[0047] 1) n i represents the name of the information item I i , which represents the identifier describing the information item (such as diagnostic CAN).

[0048] 2) b i represents the identifier of the information item I i belonging to the internal information technology system or the external information technology system, and in the present embodiment b i ∈{internal, external}.

[0049] 3) t i represents the type of information technology artifact corresponding to the information item I i . Different attacks can be carried out according to the type of information item. In practical applications, t i adopts a multi-level type, i.e. it can also include the sub-type of the information technology artifact, so as to better represent the type information of the information technology artifact, for example, the type of a communication system can be represented as {Communication, bus, dbus}, i.e. the information item corresponds to a dbus communication system artifact.

[0050] 4) appi represents the information item I i corresponding application, including application name and application type. When app i If not, it can be filled with a default filler.

[0051] 5) p i represents the information item I i corresponding security protection 3-tuple. Security protection refers to measures taken to protect smart devices from network attacks during development. Security attributes, assets to be protected, and security controls implemented are mainly related to this purpose. Security attributes refer to security-related functional attributes that security protection artifacts have. In this embodiment, security attributes use six security attributes, namely confidentiality, integrity, availability, authentication, authorization, and non-repudiation. Assets include specific values that need to be protected, and the purpose of network attacks is usually to obtain or destroy protected assets, including intellectual property, privacy, functional data, etc. Assets depend on systems, data, protocols, functions, and applications, and each asset contains at least one security attribute. Security control represents the type of security control technology used, which is related to the protection of security attributes. For example, "message encryption" is a type of security control, which is related to the protection of data confidentiality.

[0052] Therefore, in the present application, a security protection description in the form of a 3-tuple is provided for each information item of a smart device:

[0053] p i = (SP i , SC i , SA i )

[0054] Wherein:

[0055] 1) SP i represents the set of security attributes corresponding to the information item I i , that is, the information item contains at least one security attribute.

[0056] 2) SC i represents the set of security controls related to the information item I i . If an information item has no security control or has not been defined in the current state, this set can also be empty.

[0057] 3) SA i represents the information item I i ​Related Asset Set. This set can also be empty if the project has no assets or they have not been identified at the current stage of development.

[0058] For example, a security protection description of an information item is as follows:

[0059]

[0060] p1 describes a security protection without specifying security controls and assets.

[0061] S102: Constructing the information technology system model:

[0062] According to the connection relationship between each information technology artifact in the intelligent device information technology system, the adjacency matrix M between information items is obtained adj , so that the information technology system model M system =(Items, M adj ) is obtained, Items represents the set of all information items.

[0063] S103: Attacker permission description:

[0064] After defining the system model and modeling its security protection, the next problem is how to represent the attack path in the model. In order to facilitate the description, the present application proposes the concept of attacker permission. Attacker permission is an abstract category describing the attacker's ability to implement specific attacks on the system model item. The present application defines the following five permissions: ReadWrite (read / write (functional communication link)), Excecute (execute (functional component)), Read (read (functional component)), Write (write (functional component)), FullControl (full control (functional component)). Figure 2 is an example diagram of possible transitions between the five attacker permissions in the present application. Starting from the "read / write" permission of the left communication system, any one of the four permissions of the middle component can be obtained. Only by obtaining the "write" or "full control" permission can the right communication system be accessed.

[0065] The attacker permission and the assumption that when the write or full control permission is reached, the connected communication system can be accessed are used to map potential attack paths in the system model. For this purpose, each information item in the information technology system model is assigned a permission, and the attack path is modeled as a series of attack steps directed to a specific permission. The attacker permission M att is defined as a 2-tuple:

[0066] M att =(A, δ A )

[0067] wherein,

[0068] 1) A represents the set of attacker's privileges, A = {ReadWrite, Execute, Read, Write, FullControl};

[0069] 2) δ A : A → P(A) represents the mapping from one privilege to its reachable subsequent privileges. P(A) represents the power set of attacker's privilege set A (the set of all subsets). The mappings for the 5 attacker's privileges are as follows:

[0070] δ A (ReadWrite) = {ReadWrite, Execute, Read, Write, FullControl}

[0071] δ A (Execute) = {Execute, Read, Write, FullControl}

[0072] δ A (Read) = {Execute, Read, Write, FullControl}

[0073] δ A (Write) = {ReadWrite, Execute, Read, Write, FullControl}

[0074] δ A (FullControl) = {ReadWrite, FullControl}

[0075] Applying attacker's privileges to the information technology system model can be used to represent the attack path of an attacker from the system entry (e.g. a Bluetooth communication interface) to a specific function inside the smart device (e.g. full control of the music playing function).

[0076] S104: Attack Class Description:

[0077] In order to describe which attacks will cause privilege transition (e.g. from read / write to execute) and which vulnerabilities will be exploited, the present invention also describes the attack class (Attack Class). Since each attack step in the attack path uses a vulnerability exploit to exploit a vulnerability, the transition between two attacker's privileges can correspond to multiple attack classes. Each attack class has an attack configuration, which includes at least one threat class and one technology domain. The attack configuration will be the main basis to determine which attack classes will be used to perform privilege transition. Figure 3 is an example diagram of attack classes in the present invention. As Figure 3As shown, the conversion between the two attacker permissions is made through an attack, which is described using an AC (attack category). Each conversion of permissions is made via at least one AC, which includes attack-related data.

[0078] In the present application, according to the specific circumstances of the intelligent device, an attack mode set ATT, a vulnerability set V and a threat set U are set, each attack mode, vulnerability and threat is provided with an attack configuration, and a combination of attack modes, vulnerabilities and threats with the same attack configuration is taken as an attack category. In the present embodiment, the attack modes in the attack mode set ATT adopt the CAPEC attack mode category in accordance with MITRE, the vulnerabilities in the vulnerability set V adopt the vulnerability types defined in CWE, and the threats in the threat set U adopt the threat types defined by STRIDE. The number of attack categories obtained is denoted as M, and the jth attack category is denoted as C j , j = 1, 2, …, M. The attack category C j is described as a 9-tuple:

[0079] C j = (u j , a j , f j , v j , l j , s j , cvss j , evss j , config j )

[0080] , wherein:

[0081] 1) u j represents a threat, u j ∈ U.

[0082] 2) a j represents an attack mode, a j ∈ ATT.

[0083] 3) f j represents a parent attack mode, if the attack mode has a parent attack mode, f j ∈ ATT, otherwise f j = 0.

[0084] 4) v j represents a vulnerability, v j ∈ V.

[0085] 5) l j represents the likelihood level of the attack mode, if the current attack mode has no likelihood level in the attack mode set ATT, the default level is set. Generally, the default level is set as a medium level.

[0086] 6) s j represents the severity level of the attack pattern, and is set to the default level if the current attack pattern has no severity level in the attack pattern set ATT.

[0087] 7) cvss j represents the CVSS rating applicable to the current attack category.

[0088] 8) evss j represents the availability sub-score of the CVSS rating applicable to the current attack category.

[0089] 9) config j represents the attack configuration of the current attack category, including at least one threat category and one technical domain.

[0090] S105: Constructing an information security knowledge model:

[0091] Based on the system model generated in steps S101-S104, an information security knowledge model of the intelligent device is constructed. In the present application, the information security knowledge model M security is described as a 6-tuple:

[0092] M security =(S,∑E,∑C,S start ,Q,T)

[0093] wherein:

[0094] 1) S is a non-empty, countable state set, denoted as K, each state is state k , k = 1, 2, …, K. Each state state k is described as a 3-tuple:

[0095]

[0096] wherein, i k represents the serial number of the information item corresponding to state state k , i represents the information item corresponding to state state k , i represents the attacker's authority of the information item corresponding to state state k , j k represents the serial number of the attack category corresponding to state state k , j represents the attack configuration of the attack category corresponding to state state k .

[0097] 2) ∑E represents a finite set of vulnerabilities;

[0098] 3)∑C represents a finite set of output behaviors, since the output behaviors do not need to be explicitly output in the present application,

[0099] 4)S start represents a non-empty initial state set generated by the attacker attacking the system from the entry, S start ∈S.

[0100] 5)Q represents a set of state variables, indicating the security properties violated by the attack and the level of possibility of the attack;

[0101] 6)T represents a finite transition set, denoted as D, each transition is tran d , d = 1, 2, …, D, each transition tran d is described as a 3-tuple:

[0102] tran d = (S source,d , S target,d , A d )

[0103] wherein S source,d ∈S represents the source state of the transition tran d , S target,d ∈S represents the target state of the transition tran d , and A d represents an attack category set consisting of a set of attack categories applicable to the transition tran d .

[0104] S106: Generating a state set of the information security knowledge model:

[0105] The state set S of the information security knowledge model is determined according to the information items in the system model and the permissions of the attacker. The generation process of the state set S in the present application is as follows: traversing all information items in the intelligent device information technology system model, checking the information technology artifact type thereof, generating a corresponding permission state according to the information technology artifact type, and the specific cases are as follows:

[0106] If the information item I i is a communication system or an interface, a state is generated, and the permission is set as read-write permission ReadWrite.

[0107] If the information item I i is a component, four states are generated for the information item, and the permissions are set as execution permission Excecute, read permission Read, write permission Write and full control permission FullControl, respectively.

[0108] all information items I i The generated state set S is obtained by merging the states.

[0109] S107: Generating the conversion set of the information security knowledge model:

[0110] The conversion set is first determined by the permission conversion defined for the attacker's permissions. Five types of conversions are defined in the present application, namely self-conversion, conversion between component states, conversion from interface to communication system and vice versa, conversion from interface or communication system to component, and conversion from component to communication system. These five types of conversions determine the possible conversions in the intelligent device information security knowledge model. For each conversion, the attack category that causes the state conversion to occur must be determined, so the specific method for generating the conversion set in the present application is as follows:

[0111] Traverse all information items I in the intelligent device information technology system model i , generate all possible conversions according to the five types of conversions defined, for each conversion, obtain its target state, and then obtain the attack configuration of the target state from the state set, according to the description of the attack category, filter all attack categories that match the technical domain and threat of the attack configuration of the target state, to form the attack category set of the current conversion, and thus obtain the 3-tuple of the conversion.

[0112] By using the above method, the intelligent device information security knowledge model for information security testing can be obtained, and the tester can generate information security test cases for the intelligent device based on the information security knowledge model, thereby improving the testing efficiency.

[0113] Although the above describes the specific embodiments of the present application for the purpose of facilitating the understanding of the present application by those skilled in the art, it should be clear that the present application is not limited to the scope of the specific embodiments, and for those skilled in the art, it is obvious that various changes are within the spirit and scope of the present application as defined and determined by the appended claims, and all inventions utilizing the concept of the present application are within the scope of protection.

Claims

1. A method for information security knowledge modeling for smart devices, characterized in that, Includes the following steps: S1: Divide the information technology artifacts of smart devices into three categories: components, communication systems, and interfaces, and abstract each information technology artifact into an information item. , , This indicates the number of information technology artifacts, each information item. Described as a quintuple: ， in, Information item The name represents the identifier that describes the information item; Information item Identifiers belonging to internal or external information technology systems; Information item The corresponding information technology artifact type; Information item The corresponding application, including the application name and application type; Information item The corresponding safety protection triplet, , Information item The corresponding set of security attributes, , Information item The relevant set of security controls Information item The related asset portfolio; S2: Based on the connection relationships between various information technology artifacts in the intelligent device information technology system, obtain the adjacency matrix between information items. Thus, an information technology system model is obtained. , Represents the set of all information items; S3: Grant attacker privileges Describing it as a tuple: ， in, Represents the attacker's set of privileges. ReadWrite indicates read and write permissions, Execute indicates execute permissions, Read indicates read permissions, Write indicates write permissions, and FullControl indicates full control permissions. This represents a mapping from one permission to subsequent permissions that it can reach: ， ， ， ， ， S4: Set the attack mode set according to the specific situation of the smart device. Vulnerability Collection and threat set Each attack pattern, vulnerability, and threat has an attack configuration. Combinations of attack patterns, vulnerabilities, and threats with the same attack configuration are grouped into one attack category. The number of attack categories obtained is denoted as . , No. The attack categories are: , , attack category Described as a nine-tuple: ， in, Indicates a threat, ; Indicates the attack mode. ; This indicates the parent attack pattern. If this attack pattern has a parent attack pattern, then... ,otherwise ; This indicates a vulnerability. ; This indicates the probability level of an attack mode; if the current attack mode is in the set of attack modes... If there is no probability level, then set it to the default level; Indicates the severity level of the attack mode; if the current attack mode is in the set of attack modes... If no severity level is specified, the default level will be set. This indicates the CVSS rating applicable to the current attack category; This represents the exploitability score that applies to the CVSS rating for the current attack category. This indicates the attack configuration for the current attack category; S5: Information security knowledge model based on extended finite state machine Described as a six-tuple: ， in: Let be a non-empty, finite set of states, containing the number of states. Each state is , ; Each state Described as a triple: ， in, Representing state The serial number of the corresponding information item, Representing state The corresponding information items, Representing state The attacker's permissions for the corresponding information item. Representing state The corresponding attack category number, Representing state Attack configuration for the corresponding attack category; Represents a finite set of vulnerabilities; Represents a finite set of output behaviors. ; This represents the non-empty initial state set generated when an attacker attacks the system. ; This represents a set of state variables, indicating the security attributes violated by the attack and the probability level of the attack. Let represent a finite set of transformations, denoted by the number of transformations it contains. Each converted , , each transformation Described as a triple: ， in, Indicates conversion The source state, Indicates conversion The target state, Indicates applicable to conversion A set of attack categories, including at least one threat category and one technology domain; S6: Iterate through all information items in the intelligent device information technology system model, if the information item... If it is a communication system or interface, then generate a status and set its permission to ReadWrite; if the information item If it is a component, then four states are generated for the information item, and the permissions are set to Execute, Read, Write, and Full Control respectively. All information items The generated states are merged to obtain a state set. ; S7: Defines five types of transformations: self-transformation, transformation between component states, transformation from interface to communication system and vice versa, transformation from interface or communication system to component, and transformation from component to communication system; iterates through all information items in the intelligent device information technology system model. Based on the five defined transformation types, all possible transformations are generated. For each transformation, its target state is obtained, and then the attack configuration of the target state is obtained from the state set. Based on the description of the attack category, all attack categories that match the technical domain and threat of the attack configuration of the target state are filtered to form the attack category set of the current transformation, thus obtaining the transformation triplet.

2. The information security knowledge modeling method according to claim 1, characterized in that, The security attributes in step S1 include confidentiality, integrity, and availability.

3. The information security knowledge modeling method according to claim 1, characterized in that, The security attributes in step S1 include confidentiality, integrity, availability, authentication, authorization, and non-repudiation.

4. The information security knowledge modeling method according to claim 1, characterized in that, The attack mode set in step S4 The attack patterns used in this application conform to the CAPEC attack pattern type defined by MITRE.

5. The information security knowledge modeling method according to claim 1, characterized in that, The vulnerability set in step S4 The vulnerabilities in the data adopt the vulnerability types defined by CWE.

6. The information security knowledge modeling method according to claim 1, characterized in that, Threat set in step S4 The threats in the data use the threat types defined by STRIDE.

Images