Method and device for security policy operation and maintenance evaluation

Abstract

The embodiment of the invention discloses a method and device for evaluating operation and maintenance of a safety strategy, and relates to the technical field of communication. The method and the device can be used for correctly and visually evaluating the operation and maintenance condition of the firewall safety strategy. The method comprises the following steps: performing strategy analysis on firewall strategy data to obtain strategy parameters, wherein the strategy parameters include redundant strategy parameters, missed strategy parameters and risk strategy parameters; calculating the strategy health degree according to the strategy parameters; generating an evaluation report according to the strategy health degree. The method and the device are suitable for a strategy operation and maintenance evaluation system.

Description

technical field [0001] The present invention relates to the field of communication technologies, in particular to a method and device for evaluating security policy operation and maintenance. Background technique [0002] With the continuous development of network technology in recent years, in order to protect the data security of network users, setting up a network firewall has become an indispensable security measure. The firewall is the only entrance and exit of information between different networks or network security domains. It monitors, restricts, and changes the data flow across the firewall, shields the information, structure, and operating status of the network from the outside as much as possible, and selectively accepts external access. , to strengthen internal device supervision, control access to servers and external networks, to prevent unpredictable and potentially destructive intrusions. With the popularization of enterprise office networking, firewalls h...

AI Technical Summary

Problems solved by technology

[0003] There are at least the following problems in the existing technology. For more and more complex firewall security policies, managers have no way to directly judge the operation and maintenance status and the effectiveness of security policy optimization work, and it is difficult to obtain intuitive comprehensive data for security policies. Therefore, it is impossible to intuitively evaluate and monitor the rationality of firewall security policies, security and the effect of operation and maintenance.

Images