Core design method and system based on real-time network security monitoring

Abstract

The invention relates to a core design method and a core design system based on real-time network security monitoring. The method comprises the steps of setting and caching a security hazard character and a request time interval; acquiring and processing the security hazard character when in accessing; acquiring an access request IP; judging whether the access request is a hostile attack; and if yes, performing a limited access; and if not, responding to the access request. According to the method and the system provided by the invention, the transmitted special character is filtered, intercepted, transferred or replaced by setting the security hazard character and the request time interval, the time interval for sending the request is compared with the preset request time interval, limited access treatment is performed on the access not accordant with requirements, so that the special character is intercepted, the attack is prevented before attack, the core is prevented from being damaged, and security performance of the core is improved.

Description

technical field [0001] The invention relates to a kernel design method, more specifically a kernel design method and system based on real-time monitoring of network security. Background technique [0002] The kernel is the most basic part of the operating system. It is responsible for managing the system's processes, memory, device drivers, files and network systems, and determines the performance and stability of the system. Generally, the kernel design process involves the security of the network information system. The security technology system of the network information system is usually reasonably configured and deployed under the guidance of security policies: network isolation and access control, intrusion detection and response, vulnerability scanning, Anti-virus, data encryption, identity authentication, security monitoring and auditing and other technical equipment, and between various equipment or systems, system functions can be complemented and coordinated. ...

AI Technical Summary

Problems solved by technology

[0003] At present, it is difficult for most kernels to detect network security in real time during the design process. Therefore, it is easy to encounter similar SYN / ACK FLOOD supply. The ordinary firewall equipped with the kernel is difficult to resist such attacks, and most attacks are difficult to be blocked. Hazards such as causing the kernel to suffer major trauma and crash before attacking the target

Images