The invention discloses a
computer network engineering security
control system, which relates to the technical field of
network engineering security, and is characterized in that in an external
attack surface influence division process, a
vulnerability scanning tool is used for carrying out
vulnerability scanning on network equipment accessed to
the Internet in a set time period; in the internal
attack surface influence division process, employee equipment is scanned and detected by using equipment management
software, so that the employee equipment is ensured to conform to the security standard set by a company, and the security of the employee equipment is ensured to be consistent with the security standard set by the company by calculating the comprehensive
attack surface evaluation coefficient. In combination with the external
attack surface influence and the internal
attack surface influence, the overall security condition of the specified company can be comprehensively evaluated, and in the
network architecture mode evaluation process, whether the
network architecture mode corresponding to the
network architecture in the specified company meets the
network engineering security requirement or not is evaluated. And identification of security vulnerabilities in the existing network architecture is facilitated.