Research And Application Of Security Index Quantization Based On Threat Intelligence

With the development of Internet technology,the traditional financial industry has been hit and gradually merged with the Internet to form a new Internet finance.A comprehensive measurement of the security status of the financial system has gradually become a research hot-spot.This paper applies the network security situation awareness to the financial field in order to obtain the security status of the system and discusses in detail the situation acquisition in situation awareness,that is,establishing the security index system which is based on the threat intelligence in the financial industry and quantitative technology research on indexes.The main contents of this paper include the following points:1.Studies the related papers about the safety index system established in the financial field both at home and abroad.2.Analyzes the concept and connotation of network security situation awareness and threat intelligence.3.Studies ISO 27001,level protection,FFIEC CAT,CIS CSC and IPDRR framework.On the basis of this,this paper incorporates the characteristics of threat intelligence and propose a set for the financial system based on threat intelligence index system and discusses in detail the area of intelligence management.4.According to the established index system,for the problem that the index data is not clear and can not be obtained,this paper proposes to introduce a layer of acquisition indicators on the basis of the original indicator system.For the problem of the correlation between the indexes and the meaninglessness of the index data,the paper proposes to divide the collection index into five categories according to the correlation: timeindex,frequency index,expert experience index,positive correlation index and trend index.After that,Each category of indicators were quantified.Then,the quantified data is standardized.Finally,the paper selects a module,imports the actual data and obtains the results after quantization.5.Quantification of indicators in the original indicator system is obtained by multiplying the weight of the next indicator by the corresponding data and accumulating.Through studying expert survey,AHP,entropy method,standard deviation method and related function method,this paper decided to use the entropy method to obtain the weight of the collection index and use the expert investigation method to obtain the weight of the indicator in the original indicator system.After selecting a module in the index system,this paper brings the actual data into the module,and obtains the data of each layer index.The research results of this paper provide theoretical support for the acquisition of the security situation and understanding of the security situation in the financial field,which lays the foundation for further obtaining the security situation of the system and forecasting the future security status.