网络安全风险评估分析方法研究综述

Network security risk assessment method: a review

近年来,由于网络安全事件的频繁发生,人们对网络安全的重视度在不断提升。网络安全风险评估作为一种主动防御的安全技术,已经成为解决网络安全问题的最有效方法之一。本文对2008年至2018年间的网络安全风险的评估方法进行了系统的调查研究,提取总结出影响评估结果的因素,并据此对现有的方法进行分类、对比,全面掌握各个方法优势及其适用范围,给出客观准确的评估结果;并对其未来的发展方向进行提议,引导网络安全风险评估向着系统化、科学化、自动化、智能化的方向发展。

In recent years,because of the frequent occurrence of network security incidents,people are paying increasing attention to network security.As an active defense security technology,network security risk assessment has become one of the most effective methods to solve network security problems.In this paper,the evaluation methods of network security risk from 2008 to 2018 are systematically investigated,factors influencing the evaluation results are extracted and summarized,based on which the existing methods are classified and compared,the advantages and application scope of each method are comprehensively grasped,and the objective and accurate evaluation results are given;and the future development direction is summarized to guide the network security risk assessment is developing towards systematization,scientization,automation and intellectualization.