网络安全等级保护等保管家

1、产品概述
为提升网络安全等级保护测评的效率和质量，中检天帷采用计算机视觉、生成式人工智能、知识图谱、语义理解、数据挖掘等技术，自主研发网络安全等保管家，实现等保测评自动化、数字化、智能化，提升测评效率150%以上，质量可靠率达到98%以上。
等保管家依据相应国家标准，建立完善的合规指标体系，同时可帮助运营单位对信息系统进行安全合规自查以及可帮助安全监管机构组织安全检查工作。该系统为用户提供了一个一体化的人工智能测评平台，简化了繁琐的工作流程，大大提高了工作效率。

2、功能特性
1）自动化测评
信息以基线扫描为基础，采用人工智能技术深度绑定等级测评要求，实现网络安全设备、服务器、数据库和管理体系等自动化测评。工具内置有参数识别规则500+，结果记录生成规则950+，支持在线扫描和离线导入两种检测模式，智能、高效、准确。
2）智能风险分析
传统的风险分析耗时长易出错，等保管家实现了风险分析自动化。当完成结果记录上传后，一键自动进行识别分析，自动识别率达到100%，风险分析花费时间减少了80%。对比传统人工模式，极大的减少人为操作的失误并提高工作效率和准确率。
3）基本信息自动填充
支持信息提取并自动填充功能，通过目标检测、OCR字符识别、语义分析等深度学习技术，实现信息自动化提取与填充功能。在质量和效率方面，将基础信息的准确度由90%提高至100%，基础信息编写时长由原来120秒缩短为2秒。

3、应用场景
1）测评机构开展等级测评工作
等级保护测评师可通过该工具对项目基础信息以及对现场的核查情况进行收集，系统对测评结果进行风险分析和评估，分析完之后会出具一份完整的等级测评报告，此报告会包含一系列专业化的测评结果以及整改建议等。
2）系统运营单位进行安全自查工作
平台依据相应国家标准，建立完善的合规指标体系，可帮助运营单位对信息系统进行安全合规自查工作，对安全风险进行全面而深度的识别和分析，分析完成之后会出具对应的报告。
3）安全监管机构组织安全检查工作
可帮助网络安全监管机构以量化评分的方式对被检查单位进行网络安全检查。

1. Product Overview
To improve the efficiency and quality of cybersecurity grade protection evaluation, Zhongjian Tianwei independently developed Cybersecurity Equal Protection Steward by adopting technologies such as computer vision, generative AI, knowledge graph, semantic understanding, and data mining. This product realizes the automation, digitization and intelligentization of grade protection evaluation, improves evaluation efficiency by more than 150%, and achieves a reliability rate of over 98%.

Cybersecurity Equal Protection Steward establishes a complete compliance indicator system based on relevant national standards. It can help operation units conduct security compliance self-inspection of information systems, and assist security supervision institutions in organizing security inspection work. This system provides users with an integrated AI evaluation platform, simplifies cumbersome workflows, and greatly improves work efficiency.

2. Functional Features
1) Automated Evaluation
Based on baseline scanning, it deeply binds the requirements of grade evaluation with AI technology to realize automated evaluation of cybersecurity devices, servers, databases, management systems and other related objects. The tool is built with over 500 parameter recognition rules and over 950 result record generation rules, supports two detection modes: online scanning and offline import, and features intelligence, efficiency and accuracy.

2) Intelligent Risk Analysis
Traditional risk analysis is time-consuming and error-prone, while Cybersecurity Equal Protection Steward realizes automated risk analysis. After the result records are uploaded, one-click automatic identification and analysis can be performed, with an automatic recognition rate of 100%, and the time spent on risk analysis is reduced by 80%. Compared with the traditional manual mode, it greatly reduces human operation errors and improves work efficiency and accuracy.

3) Automatic Basic Information Filling
It supports information extraction and automatic filling functions. Through deep learning technologies such as object detection, OCR character recognition and semantic analysis, it realizes automated information extraction and filling. In terms of quality and efficiency, it improves the accuracy of basic information from 90% to 100%, and shortens the writing time of basic information from the original 120 seconds to 2 seconds.

3. Application Scenarios
1) Evaluation Institutions Carry Out Grade Protection Evaluation Work
Grade protection evaluation specialists can collect the basic project information and on-site verification status through this tool. The system conducts risk analysis and assessment on the evaluation results, and issues a complete grade protection evaluation report after analysis, which includes a series of professional evaluation results and rectification suggestions.

2) System Operation Units Carry Out Security Self-inspection Work
Based on relevant national standards, the platform has established a complete compliance indicator system, which can help operation units conduct security compliance self-inspection of information systems, conduct comprehensive and in-depth identification and analysis of security risks, and issue corresponding reports after analysis.

3) Security Supervision Institutions Organize Security Inspection Work
It can help cybersecurity supervision institutions conduct cybersecurity inspections of inspected units through quantitative scoring.