The invention belongs to the field of
network security, and discloses a
network security evaluation system and method based on a dynamic
attack and defense game model, and the
evaluation system comprises four functional modules of
attack and defense game construction, risk prediction, dynamic defense optimization and security
situation awareness. According to the method, the idea of dynamic
attack and defense game is introduced, multi-level and multi-scene attack and defense
simulation is carried out according to historical states, strategy data and real-
time data, and the optimal attack path and
attack strategy are calculated and analyzed through a game
equilibrium solution; according to the method, network resources and
network security resources are dynamically adjusted by relying on
reinforcement learning and
deep learning technologies and a defense rule base generated by pre-training,
network configuration is optimized according to a real-time
evaluation result, and waste of
system resources is reduced. By implementing the
system and the method provided by the invention, the security of the target network can be dynamically evaluated, the security defense strategy of the network can be adjusted in real time, and unknown attacks such as
advanced persistent threat (APT) and zero-day attack can be effectively resisted.