Network intrusion character configuration method and system

Abstract

The invention discloses a network intrusion character configuration method, which comprises the following steps of: 1) respectively setting a configuration mode for flaw related characteristics and a configuration mode for non flaw related characteristics; 2) establishing a flaw-characteristic correspondence association list, wherein the correspondence association list comprises two fields, namely a flaw name field and an attack characteristic identifier field; 3) scanning a user system to acquire a network security flaw list; 4) searching related characteristics of the network security flaw list of 3) according to the flaw-characteristic correspondence association list established by 2), wherein the flaw related characteristics found in the network security flaw list are called by a joint name, namely the flaw related characteristics, and the characteristics which are not found are called non flaw related characteristics; and 5) setting the configuration modes for the flaw related characteristics found by 4) and the non flaw related characteristics according to the configuration modes set by 1) so as to form an IPS characteristic set configuration example.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network intrusion feature configuration method and system. Background technique [0002] Cyber ​​attackers can achieve the purpose of destroying or obtaining illegal benefits by exploiting the loopholes in computer software or hardware systems. For example, using other people's computers as a springboard to steal files from other computers, causing other people's computers to crash, formatting disks, monitoring other people's computers or spying on other people's privacy, remotely controlling other people's computers, invading characteristic website servers to replace the homepage of the website, Download the user database to cause commercial losses, attack the website server so that it cannot be accessed by users, etc. Network attack technology has now been gradually mastered and developed by more and more people, and more and more "fool-type" network attack software is develo...

AI Technical Summary

Problems solved by technology

There are two hidden dangers in this system: 1) In a large-scale network or complex software system environment, the installation of an upgrade package will lead to service termination, which is generally difficult for users to accept; 2) Similar to dynamic WEB websites, OA systems, and user business system software, They are codes developed by users themselves or commissioned to customize. Unlike commonly used software such as office, even if very dangerous security holes (such as SQL injection) are scanned, it is difficult to obtain upgrade packages within a time acceptable to customers.

Images