内部网络安全监管指标体系设计与实现

Design and Implementation of Security Indicator System Suitable for Internal Network Environment

当前,内部网络缺乏一套科学的网络安全监管指标体系,导致内部网络安全监管难以达到预期效果。因此,设计了一套集资产健康度、网络安全风险、保密风险和处置质效四位一体的安全监管指标体系,并结合信息科学中常用的神经网络激活函数Sigmoid函数及层次加权递归思想,设计了一种适用于指标体系安全评估的算法。此外,在内部网络安全监管指标体系的实现方面,对指标数据采集、指标量化统计、指标体系安全评估及指标态势可视化进行了设计。实践表明,此设计的内部网络安全监管指标体系及其实现方法科学有效,能够提升内部网络安全风险感知能力和治理水平。

At present,the internal network lacks a set of effective supervision indicator system,which makes it difficult to achieve the expected results.Therefore,this paper designs a set of indicator system,which contains asset health,network security risk,confidentiality risk,and processing efficiency.It combines the neural network activation function Sigmoid and recursive weighted ideas with hierarchical in security indicator system.In addition,in the realization of the internal network security supervision indicator system,this paper designs the indicator data collection,indicator quantitative statistics,indicator system security assessment and indicator situation visualization.Practice indicates that the designed internal network security supervision indicator system and its implementation are scientific and effective,and can improve the internal network security risk perception ability and governance level.