Service-based indexed information security audit early warning system and method

Abstract

The invention provides a service-based indexed information security audit early warning system and method. The system comprises a regular node generating module, a regular cluster matching module, a flow generating module and an early warning index generating module; the regular node generating module is used for generating a regular node for each operation data of a service operation; the regular cluster matching module is used for screening the regular nodes with the same feature as a regular cluster from all the regular nodes of the service operation of a user; the flow generating module is used for generating a service flow for a series of single service operations of the user through regular cluster matching; and the early warning index generating module is used for generating an index for judging whether early warning is performed or not according to comprehensive judgment of a plurality of service flows. According to the service-based indexed information security audit early warning system and method, service requirements correspond to indexes, so that the indexed early warning technology is realized and the user experience is improved.

Description

Technical field [0001] The present invention relates to the technical field of information security, in particular to a business-based indexed information security audit and early warning system and method. Background technique [0002] In recent years, with the rapid development of IT systems, enterprises have become increasingly dependent on IT systems. As far as a network information system is concerned, some traditional security issues need to be considered, such as anti-hacking, anti-virus, anti-spam, anti-backdoor, anti-worm, etc. However, with the improvement of informatization, various business systems have become increasingly complex, the protection of business systems has become more and more important, and security governance in non-traditional fields has become more and more important. According to the latest statistics, 70% of the serious attacks on enterprises are from internal personnel in the organization. Therefore, information security governance for business s...

AI Technical Summary

Problems solved by technology

[0006] However, the above scheme includes too many complex rule configurations and applications, which brings a lot of trouble from configuration to application, and often leads to data confusion, which is not convenient for practical application

Images