Abstract:The rapid development of information technology has greatly improved the level of enterprise informatization. However, while providing a variety of services to users, there may also be security issues such as data breaches, denial of service attacks, and extortion attempts. To address the aforementioned issues and enhance the security of information systems, multiple security devices have implemented protective measures. However, relying solely on the configuration and construction of security facilities cannot fundamentally resolve network security issues. Therefore, an important challenge currently faced is how to quantitatively assess, evaluate, and guide security personnel to optimize the configuration of the network security system. This is a significant matter that requires careful consideration.Currently, most existing quantitative security evaluation schemes focus on assessing security risks, but the entire security protection system has not been utilized as an evaluation criterion, and its protective effectiveness has not been quantitatively evaluated. Simultaneously, establishing quantitative connections between security impact factors and the security protection system, linking the protection effectiveness of individual security devices to overall security protection effectiveness, and then optimizing and improving the protection effectiveness have become critical bottlenecks in measuring the protection effectiveness of the network security protection system.

Introduction and Advancement of Information System Security Evaluation Criteria and Technology

Research on Information Security Model and Security System Design

Researches on Performance Evaluation of Biometric Authentication Systems

RESEARCH INTO THE NETWORK SECURITY TECHNOLOGY OF ELECTRONIC TAXATION SYSTEM ON INTERNET

An Information System Security Evaluation Method Based on FCME Model

An Object-Oriented Method for Information System Security Evaluation

Study of Security Metrics of Software System for Comparative Evaluation

RESEARCH AND IMPLEMENTATION OF MODEL OF INFORMATION SECURITY EVALUATION

Defining Security Requirements with the Common Criteria: Applications, Adoptions, and Challenges

Technical Research on Computer Network Security Automatic Evaluation

System Security Assurance: A Systematic Literature Review

Cyberspace Security Evaluation Technology on the Condition of Attack and Defense Confrontation

Study on Evaluation Method of Information System in Enterprise Based on CSF

An Exploration of the Network Information Security Appraisal System of the Campus Net

Current Research Status on Evaluation Criteria of Networked Information Resources in China and Overseas

Approach to Security Evaluation Based on Rough Set Theory for Host Computer

Exploring Computer Information Security Technology and Protection Methods

Study on Evaluation for Security Situation of Networked Systems

Information Security Evaluation of Hebei Wheat Planting Expert System

A Think on Security and Trusty Measurement for Virtualized Environment

Design and Implementation of Information Security System in E-Campus