SYSTEM FOR MANAGING RISK OF CUSTOMER ON-DEMAND AND METHOD THEREOF

摘要

A system and a method for managing risk in response to customer demand are provided to evaluate risk of all assets by enabling a telecommunication provider server to perform vulnerability/risk level evaluation of network equipments and server systems placed in an internal network or a DMZ(Demilitarized Zone), and provide a result to a customer in response to customer demand. A vulnerability analyzing module(101) evaluates a vulnerability level by collecting and using vulnerability of a customer network(800) by receiving a request from a customer through an internet network(200), a router(300), a security device(400) and an aggregation switch(500). A threat analyzing module(102) evaluates a threat level by receiving event log information, which is generated by detecting and blocking harmful traffic inputted/output from the customer network. A risk level analyzing module(103) analyzes a risk level by evaluating asset value of the customer network, and using vulnerability/risk level evaluation results and an asset vale analysis result. The vulnerability analyzing module evaluates the vulnerability by connecting to a DMZ(600) directly through the Internet without passing security equipment(400) and enables the customer to check a risk analysis result in the web.