Network security perception system and method, and readable storage medium

Abstract

The invention discloses a network security perception system comprising multiple probes respectively deployed on switches or routers of monitoring network areas and used for dynamically obtaining mirror image traffic of the respective monitoring network areas, collecting specific traffic information from the mirror image traffic, and uploading the collected mirror image traffic to an analysis platform through an encrypted communication channel; the analysis platform used for dynamically receiving the traffic information uploaded by the probes, performing multi-dimensional correlation analysisto identify the security threats in the entire network, and displaying an analysis result in a visible manner. The invention further discloses an implementation method of the network security perception system and a computer storage medium. The network security perception system provided by the invention can monitor the entire network in mesh network form in all directions, perceive the potentialsecurity threats in the network and protect the information security in the entire network.

Description

technical field [0001] The present invention relates to the technical field of network information security, in particular to a network security awareness system, method and computer-readable storage medium. Background technique [0002] At present, the IT industry has undergone major changes normally. The following three changes in the status quo have forced the security infrastructure construction of the majority of enterprises, governments, education, finance and other industries to change from the deep-rooted border defense idea to the entire network security detection. We also deeply understand that Detection is as important as defense: [0003] (1) The IT business becomes complicated, blurring the boundary, or no longer having a simple boundary; [0004] (2) Attacks have become more complex, more concealed, and attack methods are more sophisticated. Attackers always have various methods to bypass border defenses, such as BYOD, zombie worms, insiders, etc.; [0005] (...

AI Technical Summary

Problems solved by technology

[0007] The main purpose of the present invention is to provide a network security awareness system, method and computer-readable storage medium, aiming to solve the technical problem of how to monitor the entire network in real time without affecting the network

Images