System security assessment method and system

• Main Authors: QU XU, SHEN SHENGBING, TAN HAO, ZHAO MING, MAO KAI, ZUO PINGYANG, RAN JIAN, MA GUOLEI
• Format: Patent
• Language: Chinese; English
• Published: 28.06.2024
• Subjects: CALCULATING; COMPUTING; COUNTING; DATA PROCESSING SYSTEMS OR METHODS, SPECIALLY ADAPTED FORADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORYOR FORECASTING PURPOSES; PHYSICS; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE,COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTINGPURPOSES, NOT OTHERWISE PROVIDED FOR

The invention provides a system security assessment method and system. The method comprises the following steps: S1, determining security requirements of a system; s2, performing risk identification on each product in the system according to the security requirement of the system; s3, analyzing and evaluating the identified risk of each product to obtain a risk index of each product; s4, selecting products of which the risks need to be eliminated or reduced according to the risk index of each product, and eliminating or reducing the risks by adopting corresponding safety technical measures; and S5, judging whether the product of which the risk is eliminated or reduced meets the safety requirement of the system or not, if so, completing the safety evaluation of the system, otherwise, improving the product of which the risk is eliminated or reduced, and turning to S2. The technical problems that in the prior art, an evaluation method is not perfect enough and effective coverage cannot be achieved can be solved,