The invention discloses a
computer network defense decision-making
system, which includes a transparent firewall, a regular inspection module, a
virus isolation module, a
virus feature matching module, a port audit module, a traffic statistics module, a network
abnormality evaluation module, a defense decision generation module, and a defense decision-making module. Execution module, emergency channel module, restore module, data isolation upload module. The present invention realizes the real-time monitoring and auditing of the network flow, maintains the good state of the network; improves the
immunity of the network through the analysis and memory of the unknown intrusion behavior; and can effectively control the harm range after the intrusion, ensuring the smooth flow of the network and the service It is provided normally, and at the same time, it can automatically generate and execute different defense decision-making schemes according to different network attacks, which improves the self-repair and restoration capabilities of the
system, maintains the stable operation of the network, and has data protection capabilities. The occurrence of the previous situation leading to the loss of information.