Service-oriented large-scale network security situational assessment device and method

Abstract

The invention provides a service-oriented large-scale network security situational assessment device and method. The device comprises a monitoring platform and an acquisition agent, wherein the monitoring platform comprises a data analysis / index extraction module, a situational assessment module, a database middleware module, a command configuration module, a plug-in module and an XML (Extensible Markup Language) data conversion module; the acquisition agent comprises a server performance state acquisition agent, a network equipment state acquisition agent and a specific service performance state acquisition agent; the monitoring platform sends out an alarm in one or more modes and carries out emergency response by using a predefined event processing program; and the acquisition agent takes charge of receiving a specific monitoring command transmitted by the monitoring platform to finish acquisition of various network security situational indexes. The device and the method contribute to making accurate assessment on global security of a network system, facilitate timely adjustment of a security policy by a network administrator, and provide theoretical basis and technical support for subsequent security situational prediction and situational visualization.

Description

technical field [0001] The invention belongs to the field of information security and relates to a service-oriented large-scale network security situation assessment system. Background technique [0002] With the advent of the Internet age, my country's network security issues have become increasingly prominent. Network Security Situational Assessment (NSSA) refers to assessing the design or implementation vulnerabilities that may appear in the system through the assessment process. This process is used to ensure that the network system is not damaged accidentally or intentionally. The network security situation assessment technology can dynamically reflect the network security situation as a whole, predict and warn the development trend of the security situation, and provide a reliable reference basis for enhancing network security. [0003] Network service is the basic unit of resource encapsulation and sharing in an open network environment. It is a series of functions a...

AI Technical Summary

Problems solved by technology

[0014] At present, there are many individuals and institutions conducting research on network security situational awareness at home and abroad, and the research angles and research methods used are also diverse. However, the relevant research on large-scale network security situational assessment using service-oriented thinking has not yet been reported.

Images