The invention belongs to the technical field of
information security, and particularly relates to a commercial
password evaluation system and method, and the
system comprises a protocol dynamic analysis layer, a multi-
modal knowledge center, and an evaluation engine. The protocol dynamic analysis layer comprises a protocol grammar feature
library used for defining protocol features; the SM-BERT semantic understanding module is used for protocol logic semantic extraction; the multi-
modal knowledge center comprises a data
modal fusion module used for integrating data and executing cross-modal alignment; the dynamic relation
inference engine is used for performing
incremental learning, generating association rules and filtering invalid rules; the evaluation engine comprises a multi-modal
feature extraction module used for analyzing
cipher suite configuration and a secret key life cycle; the compliance
rule engine executes national cryptographic
algorithm coverage detection and sensitive data protection
verification; the
physical security enhancement module simulates side channel attacks; according to the method, the problems of a static rule base,
data splitting and high misjudgment rate in traditional
password evaluation are solved, and the safety and evaluation efficiency of commercial
password application can be remarkably improved.