Abstract:

This paper analyzes the possible impact of the new changes of the national standard in classified protection of cybersecurity in the period of 2.0 on the assessment conclusions, and discusses the limitations of the quantitative analysis methods based on assessment indicators and assessment objects described in the past with actual cases and data, and puts forward the idea of adjusting and optimizing quantitative calculation to produce the assessment conclusions according to the new characteristics of the structure and content of the national standard in classified protection of cybersecurity. The principle of defect deduction and the quantitative calculation method of defect deduction are given, and the difference in the calculation results of various quantitative calculation methods is compared with the example, and the quantitative calculation formula of the assessment conclusion is proposed suitable for the new standard for the reader to analyze and reference.

Key words: classified protection object, classified protection assessment, assessment indicators, assessment objects