Network security defensive system, method and security management server

Abstract

The utility model relates to a data communication network safety technology, more particularly, provides a network security defense system and the method as well as a safety management server, so as to conduct the active defense against the terminal equipment which attacks the severs in the network. The network security defense system comprises a safety certification client, a safety access exchanger, a certification charging server, a network attack monitoring unit and a safety management server. The network security defense mechanism provided can ascertain the terminal equipment which attacks the network and assume the active defense against such terminal equipment, so as to effectively guard against the continuous diffuseness of network attach incident.

Description

technical field [0001] The invention relates to data communication network security technology, in particular to a network security defense technology. Background technique [0002] With the continuous advancement of network technology, network intrusion activities are also developing and becoming increasingly active. Among all kinds of network intrusion activities, network attacks against servers, especially key servers, can be said to be the most threatening and likely to cause the greatest loss. A key server refers to a server that stores important information in the network. A large amount of important information is stored on a key server as an intangible asset. Once it is threatened by network security, it will inevitably affect the stored important information, resulting in immeasurable losses. What's more deadly is that these network intrusions come not only from external hackers, but also from insiders. [0003] At present, various enterprises and units mainly ado...

AI Technical Summary

Problems solved by technology

[0004] In the existing network security defense mechanism, the security defense mechanism for servers is fragmented, and the network attack events discovered by network administrators on various network security defense devices are all independent, and unified management and technical statistics cannot be carried out;

[0005] In the existing network security defense mechanism, the security defense mechanism for the server is passive. When a network attack occurs, it can only be passively intercepted. When the network administrator discovers a network attack, it is impossible to locate the source of the network attack, let alone launch an attack Defensive control of terminal equipment, leading to the wanton spread of network security issues;

[0006] When using the existing network security defense mechanism, when the network administrator processes the network attack behavior, it cannot be identified and recorded. The next time the same network attack behavior occurs, it still needs to be manually processed again; and it cannot be automatically set according to the network attack information. ACL, the workload of manually setting ACL by the network administrator is huge

Images