Network virus early-warning method based on network safety sensor

Abstract

The invention discloses a network virus early-warning method based on a network safety sensor. The network virus early-warning method comprises the following steps: arranging a network safety sensor at any position needing monitoring and controlling in network architecture; acquiring a network transmission message through the network safety sensor; finding out a suspicious message, a message transmission main body and a receiving main body; reporting the found suspicious message, message transmission main body and receiving main body to a network virus big data analysis early-warning platformwith built-in Intranet or shared Internet through a connected network; performing comprehensive analysis and identification through the network virus big data analysis early-warning platform; judgingwhether suspicious attack virus transmission exists or not and a transmission main body and a transmission range; and performing corresponding early warning according to an actual condition. Through adoption of the network virus early-warning method, the data transmission dynamic state in a network can be monitored in real time; early warning can be implemented specific to suspicious virus attacks; attack sources are located and handled as much as possible before breaking out of the attacks; and data property in the network is protected to the maximum extent.

Description

technical field [0001] The invention relates to a network virus early warning method based on a network security sensor. Background technique [0002] Nowadays, the popularity of the Internet is getting higher and higher, and the scale of various government internal office networks is getting larger and larger. For example, the public security private network has formed a nationwide network, and there is a huge pressure on the management of various terminals within the network. At the same time, network virus attacks occur frequently, virus attack techniques are constantly changing and updated, and network security prevention issues are becoming more and more prominent. [0003] In the past, there were two main means of network security prevention: one is network isolation, try to prevent links with external networks, or conduct authentication management on external links, and try to avoid direct attacks from external networks; the other is to monitor terminal devices in the...

AI Technical Summary

Problems solved by technology

However, as virus attack techniques become more and more concealed, and any loopholes in management often cause new attack viruses to sneak into some terminals in our network without our knowledge, and then spread a large number of attack viruses in the network. It broke out under certain conditions, causing us huge loss of data assets

Images