Active defense system for security threats to key information infrastructure based on artificial intelligence

Abstract

The invention provides an active defense system for security threats to a key information infrastructure based on artificial intelligence. The system comprises a data acquisition module, a data analysis module, a security situation assessment module and an active defense module, wherein the data acquisition module is used for acquiring network detection data in a network system; the data analysismodule is used for analyzing and processing the acquired network detection data, and generating situation information used for describing a security state of network equipment; the security situationassessment module is used for assessing a secure state of the current network equipment according to an analysis result of the data analysis module; and the active defense module is used for determining a defense grade according to an assessment result of the security situation assessment module, and adopting a corresponding defense strategy according to the defense grade. According to the system,the threat behavior in the network system can be effectively detected, and different defense grades are determined according to a security situation value of the network equipment, so that the activedefense of the threat behavior is achieved, and the security and the stability of the network system are improved.

Description

technical field [0001] The invention relates to the field of network equipment security, in particular to an artificial intelligence-based active defense system for key information infrastructure security threats. Background technique [0002] With the rapid development of computer technology and the Internet, and the frequent occurrence of network security incidents in recent years, network security issues have become the intersection of people's attention. Although security protection facilities are installed in the existing network systems, there will still be some threat events that escape the security protection equipment and threaten network security. Therefore, how to prevent threats from invading network devices and improve the defense capabilities of network systems has become a technical problem that needs to be solved urgently. Contents of the invention [0003] In view of the above problems, the present invention aims to provide an artificial intelligence-base...

AI Technical Summary

Problems solved by technology

Although the existing network systems are equipped with security protection facilities, there will still be some threat events that escape the security protection equipment and threaten network security.

Images