Evaluation Methods of WEB Security Threats Based on Situation Change

摘要

First of all, according to the characteristics of the current Web application service attack, this paper establishes the Web security situation analysis model based on the attack chain, combines the information security level protection 2.0 evaluation control points with the Web security factors extracted from the model, and evaluates the Web service security state by the combination of network analysis and fuzzy theory. Through the combination of quantitative and qualitative methods to solve the shortcomings of the existing vulnerability model and tracking Web application service security specification inspection, to provide a theoretical basis for Web application service security evaluation.