Local area network security management system

Abstract

The invention discloses a local area network (LAN) security management system, and relates to the technical field of network security. The system comprises a client, a monitoring end and a management end; the client is a personal terminal in an LAN; the monitoring end is used for monitoring the security of the LAN, and comprises a monitoring end data transmission module, an external detection module, an activity detection module, a file system detection module, an information acquisition module, an isolating module and an external monitoring module; the management end is used for controlling the access authority and the connection state of the client in the LAN according to the monitoring report sent by the monitoring end, and comprises a management end data transmission module, a judgment and analysis module and a control module. Aiming at the defects that the security measures are imperfect, the sensitive file algorithm is inaccurate, the external detection is not intelligent and the like in the existing LAN security system, the invention provides an improved system, which has perfect security protection measures, sensitive file detection methods and intelligent external detection methods.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a local area network security management system. Background technique [0002] When it comes to network security, people will naturally think of virus damage and hacker attacks, but this is not the case. Conventional security defense concepts are often limited to defenses at the gateway level and network boundaries (firewall, vulnerability scanning, anti-virus, IDS), etc. Important security facilities are generally concentrated in computer rooms or network entrances. Under the strict monitoring of these devices, from Security threats outside the network are greatly reduced. On the contrary, the security threat from the computer client inside the network is a problem commonly reported by many security managers. [0003] For domestic network managers, most of the existing network security protection methods emphasize the prevention, detection and processing of active att...

AI Technical Summary

Problems solved by technology

As a result, in the face of some special situations, there is a lack of corresponding measures to deal with

And with the development and progress of Internet technology, the old intranet management system can no longer meet today's needs

[0006] 2. Inaccurate sensitive file matching algorithm: Most of the existing sensitive file detection systems are based on the AC multi-pattern matching algorithm. Although the algorithm is efficient, it is inevitable that many problems will arise due to the inaccurate algorithm when processing large documents.

[0007] 3. Lack of peripheral management mechanism: Since one of the key points of intranet management is to prevent leaks, there must be a set of special management measures for peripheral connection devices in the intranet

However, in the existing intranet management systems, most of them simply prohibit certain peripherals, and cannot allow connection settings for some special peripherals, resulting in extremely poor usability

Images