Associated equipment and method for internal network security management

Abstract

The invention provides associated equipment and method for internal network security management, wherein, through generating and maintaining a security management strategy and an audit strategy; the invention ensures that all the terminals accessible to internal network submit to the strategies; with respect to an piece of equipment unqualified to the strategies, the system processes the equipment as follows: providing a network isolation and locking device, and sending an warning, with the purpose of ensuring that the equipment does not bring the whole network with bad influence on the security and management. The invention not only implements an active defense mechanism of the system, but also effectively prevents some malicious acts of validated user, such as misapplication of network resource, information theft, and active attack by means of internal computers.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to equipment and methods related to internal network security management. Background technique [0002] With the continuous development of the information industry, computer networks have been widely used in office, command and control and other aspects. However, the ensuing computer network security and management issues have become increasingly prominent, especially internal network security management issues, such as resource abuse, mobile device management, unauthorized access, information leakage, etc. perspective for security management. [0003] In response to the above problems, many industry experts, IT manufacturers or integrators have proposed their own different solutions and related products. These solutions, either from the security point of view, or from the management point of view, or a combination of the two, more or less solve some problems, such as so...

AI Technical Summary

Problems solved by technology

These solutions, either from the security point of view, or from the management point of view, or a combination of the two, more or less solve some problems, such as some systems focus on the security protection of intranet computers, effectively detect and Eliminate viruses and Trojan horses to ensure that intranet information is not maliciously stolen, and at the same time locate the source of harm to prevent the spread of viruses. However, this often ignores factors such as information system damage caused by legitimate operators through personal computers; some systems emphasize border networks Security protection prevents internal sensitive information from flowing out through the network, but cannot prevent information leakage caused by operators copying and printing files through mobile devices; some systems can fully protect computers in the network, and prevent information In order to prevent leaking incidents and implement an effective intranet security management system, it increases the burden on administrators to a certain extent, reduces the operating efficiency of computer users, and increases the complexity of their operations.

[0004] Therefore, it is imminent to find a more secure and reliable solution to solve the problems of network security and management in the existing technology

Images