Abstract:The rapid development of information technology has greatly improved the level of enterprise informatization. However, while providing a variety of services to users, there may also be security issues such as data breaches, denial of service attacks, and extortion attempts. To address the aforementioned issues and enhance the security of information systems, multiple security devices have implemented protective measures. However, relying solely on the configuration and construction of security facilities cannot fundamentally resolve network security issues. Therefore, an important challenge currently faced is how to quantitatively assess, evaluate, and guide security personnel to optimize the configuration of the network security system. This is a significant matter that requires careful consideration.Currently, most existing quantitative security evaluation schemes focus on assessing security risks, but the entire security protection system has not been utilized as an evaluation criterion, and its protective effectiveness has not been quantitatively evaluated. Simultaneously, establishing quantitative connections between security impact factors and the security protection system, linking the protection effectiveness of individual security devices to overall security protection effectiveness, and then optimizing and improving the protection effectiveness have become critical bottlenecks in measuring the protection effectiveness of the network security protection system.

Design and implementation of a security evaluation method based on event injection

A new method for analyzing and improving security protocols

Technical Research on Computer Network Security Automatic Evaluation

Research on Information Security Interaction Based on Behavior Trust Measurement Mechanism

Study on effectiveness evaluation of computer network attacks

Towards Risk Evaluation of Denial-Of-Service Vulnerabilities in Security Protocols

Security Evaluation Of Hosts Based On Network Traffic

Security Evaluation Method Based on Real Time Traffic of Hosts

Design and Evaluation of a Policy-Based Security Routing and Switching System for Data Interception Attacks

Study on Evaluation for Security Situation of Networked Systems

Research and Implementation of a Quantitative Evaluation Method for Information System Security

Analysis on the Related Evaluation Technique of Composite Attack in Network Confrontation

Multi-Step Attack-Oriented Assessment Of Network Security Situation

Security Quantitative Evaluation Method and System Design for WLAN

Design and Realization of Evaluation Environment for Intrusion Detection Systems

An Object-Oriented Method for Information System Security Evaluation

Design Of An Evaluation System For Large Scale Network Attacks Based On Emulab

Research and Application of a Network Security Quantitative Evaluation System

Study on Computer Network Intrusion Effect Evaluation

Dynamically-Enabled Defense Effectiveness Evaluation in Home Internet Based on Vulnerability Analysis

Research on Network Security Assessment Method Based on CIA