Acquired safety control method and system based on target capable of setting information safety

Abstract

The invention discloses an acquired safety guaranteeing method and the system thereof based on settable information safety objectives, the system is composed of a controllable safety working station, a safety guaranteeing system and a network element management and controlling system, a practical safety objective is composed of multi-layer characteristic vectors of practical safety objectives mapped by a reference safety objective formed by setting a key protection scope and target components and the running state information of a real-time objective detecting network, the conformity assessment is performed, the results of threat and risk measurements and safety situation evaluation are combined, the safety gradual processes of verification, enforcement, prevention and inhabitation are self-adaptively selected, the corresponding risk inhabitation, the transfer of security policy and controlling instructions distributed to the net element management and controlling system are formed, and corresponding controlling measures are actuated; therefore, the task of service application and safety cooperative safety guaranteeing are realized. The acquired safety guaranteeing method and the system have the advantages that the system self adapts to safety gradual dynamic defending and safety and service cooperative guaranteeing of the network, therefore, the false alarm or misreport, the transparency and the sustainability of the safety guaranteeing are solved and improved.

Description

technical field [0001] The invention relates to the field of computer network and information security, in particular to an acquired security guarantee method and system based on settable information security goals. Background technique [0002] Computer network security is the focus of work in the field of information security, which involves the security of the information environment that individuals, enterprises, and the country rely on for work and life. For computer network security, people tend to deploy security products: firewalls, antivirus servers, intrusion detection systems (IDS), content filtering systems, etc. However, historical and realistic security protection work experience shows that the problem of computer information security has not been effectively solved, and even intensified, despite the timely expenditure of high expenses and the deployment of advanced security products. In recent years, people have begun to think about managing information secur...

AI Technical Summary

Problems solved by technology

[0011] The technical problem to be solved by the present invention is to provide a kind of Acquired Security Assurance Method and System Based on Settable Information Security Targets

Images