An integrated network security management method and device
A technology of network security and management methods, which is applied in the field of computer network communication, can solve problems such as the inability of integrated networks to support diverse security management strategies, and achieve good scalability, good flexibility, and the effect of meeting security management needs
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0047] Such as figure 2 As shown, it is a principle flow chart of the integrated network security management method provided by the present invention, wherein,
[0048] Step 10, describe user attributes to generate user attribute tags.
[0049] The user attribute tag here is used to describe the basic information and behavior information of the user, and supports describing the user from multiple angles and dimensions (specifically, it can be described from the perspectives of identity, region, age, job nature, online time, user credibility, etc. , but not limited to). The specific expression form of the label is a string format, and the label is generated by using a uniformly set label calculation method. This calculation method supports a wide variety. For example, user attributes can be standardized and coded, and each attribute code is combined into a user attribute note. Such as image 3 As shown in , it is a schematic diagram of the generation process of user attri...
Embodiment 2
[0068] Such as Figure 8 As shown, it is a schematic structural diagram of an integrated network security management device provided by Embodiment 2 of the present invention. The device includes a user management unit 100, a service management unit 200, a policy management unit 300, and a policy matching unit 400, wherein,
[0069] The user management unit 100 is configured to describe user attributes and generate user attribute tags.
[0070] Further, the user management unit 100 is also used to register, authenticate and manage users, and generate user attribute information. User attributes are evaluated and described in multiple dimensions through user registration information and network behavior information. A description of some dynamic information generated by the user's operations on the network may include the user's online time, user credibility, and operation legitimacy.
[0071] The service management unit 200 is configured to describe service attributes and gene...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 