The invention relates to the technical field of
information security, in particular to an intelligent evaluation method and
system for
network security level protection, and the method comprises the following steps: carrying out the
hierarchical analysis of
security policy rule dependency based on a network equipment connection relation, a
router configuration file and a firewall rule
list, extracting the
interaction protocol and priority of a dependency item, and carrying out the
hierarchical analysis of the
security policy rule dependency; and identifying and correcting the existing inconsistency, and generating an optimized
security policy model in combination with a
network security level protection requirement. According to the invention, through the optimized security policy model, the analysis comprehensiveness and accuracy are improved, policy vulnerabilities are reduced, an
access control rule path is analyzed, a
database interface is combined, the systematic
risk identification capability is enhanced, the
vulnerability patch priority and coverage are combined, the
risk prevention and control capability matrix is optimized, and the prevention and control blank area is compared; the security policy coverage depth is improved, accurate evaluation and path optimization of the
network security capability are realized, and the coverage efficiency and the evaluation applicability are improved.