Dynamic regulating method and system for security policy

Abstract

The invention discloses a dynamic regulation method and a dynamic regulation system for security strategy. The dynamic regulation method for the security strategy comprises the following steps: detecting any one and a combination of network link flow, actual processing capability of a device and service type to acquire a detection result; and according to the detection result, dynamically regulating the current security strategy. The dynamic regulation system for the security strategy comprises a detection module and a regulation module, wherein the detection module is used for detecting any one and a combination of the network link flow, the actual processing capability of the device and the service type to acquire the detection result; and the regulation module is used for dynamically regulating the current security strategy according to the detection result detected by the detection module. The method and the system achieve the dynamic regulation for the security strategy of an intrusion prevention system, and achieve the dynamic balance of processing efficiency and security protection.

Description

technical field [0001] The invention relates to network security technology, in particular to a method and system for dynamically adjusting security policies. Background technique [0002] With the continuous development and progress of network technology, network attack methods are becoming more and more complex and diversified, and network security is facing great challenges. The traditional information security protection system uses firewall technology and / or intrusion detection technology. Firewalls deployed in series can intercept attacks on the lower layers, but cannot prevent attacks on deep layers such as the application layer; the intrusion detection system deployed in the bypass can timely Detect deep attack behaviors as an effective supplement to firewall technology, but it cannot achieve real-time blocking of attack behaviors, that is, it cannot handle more and more "instantaneous" attack behaviors. Therefore, in order to ensure the effective security of the ne...

AI Technical Summary

Problems solved by technology

Since the security policy of the intrusion prevention system in the prior art is fixedly configured, the security policy cannot be adjusted in real time according to the network status and business information, and the security of the network and the processing efficiency of the network cannot be considered

Images