企业安全防御体系的智能化有效性验证方案研究

Research on Intelligent Effectiveness Verification Scheme for Enterprise Security Defense System

常用的有效性验证手段大大控制了企业的安全风险,但也存在很多客观制约条件。提出了智能化有效性验证方案,首先进行可视化的二维坐标攻击面管理和积累攻击方法、技术、路径的系统知识库;然后基于攻击面和系统知识库进行“双视角”的攻击模拟模型训练,通过AI调度算法和攻击模拟模型对企业安全防御体系进行持续验证;对验证过程进行复盘、整改、调优。该方案可有效管控系统风险,快速核验系统攻击知识的信息,使验证的活动可持续。

Frequently-used effectiveness verification methods greatly control the security risks of enterprises,but there are also many objective constraints.It proposes an intelligent effectiveness verification scheme,and firstly it establishes a visual two-dimensional coordinate attack surface management and accumulates a systematic knowledge base of attack methods,technologies and paths.Then,based on the attack surface and system knowledge base,a"dual-perspective"attack simulation models is trained,and the enterprise security defense system is continuously verified by AI scheduling algorithm and attack simulation model.Then,the verification process is reviewed,rectified and optimized according to the verification results.This plan can effectively control system risks,quickly verify the information about system attack knowledge,and make verification activities sustainable.