Asset Scoring Method Using Multi-Dimensional Threat Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing asset scoring methods struggle to accurately determine threat types and security situations of equipment assets connected to networks, leading to ineffective targeted protection against network threats.
Innovation Solution
The proposed asset scoring method involves obtaining multi-dimensional threat information data, calculating sub-scores for each dimension using a preset security scoring model, and determining security levels based on the scoring results and a predefined level division rule.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all protection measures are applied to equipment assets connected to the network, then security coverage is improved, but resource consumption increases excessively
Solution Approach 1:
The patent segments the security protection approach by dividing equipment assets into different security levels based on their importance and risk exposure. Instead of applying uniform protection to all assets, the system categorizes them into multiple levels and applies differentiated protection strategies, thereby reducing unnecessary resource consumption on low-risk assets while maintaining comprehensive security coverage.
Solution Approach 2:
The patent implements local quality by tailoring protection measures to specific equipment assets based on their individual characteristics, security levels, and risk profiles. Each asset receives customized protection appropriate to its specific needs rather than blanket protection, optimizing resource allocation by concentrating security resources on high-value targets while applying minimal necessary protection to lower-priority assets.
2Reliability
If quantitative analysis of security status is performed, then asset loss reduction is improved, but accuracy in determining threat types and security situations deteriorates
Solution Approach 1:
The patent transitions from traditional single-dimension security scoring to a multi-dimensional assessment framework that evaluates assets across multiple dimensions including asset importance, vulnerability levels, threat probabilities, and security control effectiveness. This dimensional expansion enables both quantitative analysis for asset loss reduction and precise threat type identification by examining security status from multiple perspectives simultaneously.
Solution Approach 2:
The patent dynamically adjusts assessment parameters and weighting factors based on the specific context, threat landscape, and asset characteristics. By changing parameters adaptively rather than using fixed weights, the system maintains measurement precision for threat identification while enabling effective quantitative analysis for reducing asset losses through optimized security resource allocation.
3Ease of operation
If traditional asset scoring methods with fixed time periods and weights are used, then implementation simplicity is improved, but adaptability to different usage scenes and accurate threat characterization deteriorates
Solution Approach 1:
The patent introduces dynamics into the asset scoring system by making assessment parameters, time periods, and weighting factors adjustable and adaptable to different usage scenes and organizational contexts. Rather than fixed rigid parameters, the system allows customization of assessment dimensions and weights based on specific security requirements, threat environments, and asset criticality, thereby achieving both ease of implementation and scene-specific adaptability.
Data Source
AI summary
An asset scoring method and apparatus, a computer device, and a storage medium are provided. The method includes: obtaining multi-dimensional threat information data of assets to be assessed; obtaining sub-scores of dimensions according to the multi-dimensional threat information data and a preset security scoring model; according to the sub-scores of the dimensions, determining a security scoring result of the corresponding assets to be assessed; and according to the security scoring result and a preset level division rule, determining security levels of the corresponding assets to be assessed.