The application discloses a kind of
network attack defense strategy
automation cost benefit quantification method and device, the method first receives original alarm information and candidate defense strategy set, determines
attack tactic stage by semantic analysis, and defense strategy group is mapped to
standardization mitigation measure group;Again, a multi-
cost index evaluation system is constructed to mitigation measure group, and the integrated cost probability distribution is aggregated by
Gaussian modeling and hierarchical calibration entropy
algorithm;For the basic income probability distribution of mitigation measure modeling, the effective income probability distribution is generated by combining the dynamic
attack tactic weight calculated by control attenuation logic function, and the final effective income probability distribution is obtained by redundancy penalty;With the lower bound of confidence and the upper bound of cost confidence, the conservative
cost benefit ratio is calculated as the quantitative
score of defense strategy group.The application realizes the
automation quantification of defense strategy
cost benefit, to improve the
standardization and accuracy of defense decision.