Computer network defense decision system

Abstract

The invention discloses a computer network defense decision-making system, which includes a transparent firewall, a regular inspection module, a virus isolation module, a virus feature matching module, a port audit module, a traffic statistics module, a network abnormality evaluation module, a defense decision generation module, and a defense decision-making module. Execution module, emergency channel module, restore module, data isolation upload module. The present invention realizes the real-time monitoring and auditing of the network flow, maintains the good state of the network; improves the immunity of the network through the analysis and memory of the unknown intrusion behavior; and can effectively control the harm range after the intrusion, ensuring the smooth flow of the network and the service It is provided normally, and at the same time, it can automatically generate and execute different defense decision-making schemes according to different network attacks, which improves the self-repair and restoration capabilities of the system, maintains the stable operation of the network, and has data protection capabilities. The occurrence of the previous situation leading to the loss of information.

Description

technical field [0001] The invention relates to the field of computer networks, in particular to a computer network defense decision-making system. Background technique [0002] With the rapid development of computer technology and network, computer has become an indispensable tool in people's work, study and life. Similarly, the development of computer networks has also brought hidden dangers to the security of users' computer information. Network information theft, information attacks, virus transmission, etc. exist and occur all the time. [0003] Computer network defense refers to a series of protection (Protect), monitoring (Monitor), analysis (Analyze), detection (Detect) and response (Respond) unauthorized activities within the computer network and its information system. With the diversification of network attack methods, in the ever-changing network environment, it poses greater challenges to computer network defense. In order to ensure the security of large-scale...

AI Technical Summary

Problems solved by technology

With the diversification of network attack methods, in the ever-changing network environment, it poses greater challenges to computer network defense

Images