The invention relates to the technical field of
network security, in particular to a
network security index evaluation method and
system, and the method comprises the following steps: based on a
system weblog, extracting recognized
vulnerability information, analyzing the occurrence frequency and
processing response time of various security vulnerabilities, calculating the
processing efficiency, and generating
vulnerability processing efficiency information. In the invention, by evaluating the efficiency of
vulnerability processing, analyzing the implementation condition of data
encryption, detecting the security of
key management, verifying the execution consistency of access permission and evaluating the effects of multiple security measures, the
weakness of the
system is revealed, actual guidance is provided for security reinforcement, the current situation of
network security is accurately evaluated, and the security of the network is enhanced. By simulating a
threat event, evaluating the response capability of the
security system to a network
threat, determining the actual strength and potential weaknesses of the
security system and summarizing different security indexes into a comprehensive
security index, a basis is provided for a management layer decision, and
security policy adjustment based on actual data is realized.