Network security system based on big data and method thereof

Abstract

The invention discloses a network security system based on big data in the field of network security technology and a method thereof. The system comprises a data packet interception processing module,a wireless communication module, an information processing module, an information generating module, a master control module, an online state monitoring module, a firewall configuring module, a process monitoring module, a dynamic analyzing module, a host log monitoring module, an identity identification module and a system encryption module. According to the system and the method, by means of adata packet interception function which is supplied through connecting the network with the monitoring module, technology such as invasion detection, security auditing and virus detection based on a host computer can be integrated on the terminal. In a security control center, after connecting information of all controlled terminals is integrated, invasion detection and security auditing based onthe network can be applied, thereby supplying comprehensive, integral and continuous security protection to the terminal.

Description

technical field [0001] The invention discloses a network security system and method based on big data, specifically in the technical field of network security. Background technique [0002] With the development of network technology, the traditional LAN structure has the disadvantage of relatively fragile network security. The security, stability, multi-function and rapidity of enterprise network have become the most concerned issues of enterprise managers. The openness, interactivity, and decentralization of the Internet make the information sharing, flexibility, and speed that human beings yearn for meet the needs. With the deepening of informatization and the rapid development of the Internet, people's work, study and lifestyle are undergoing tremendous changes. Facing the severe situation of information security, the existing network security system has many weak links in prediction, response, prevention and recovery capabilities. [0003] Existing network security def...

AI Technical Summary

Problems solved by technology

[0003] Existing network security defense measures, such as firewalls, IDS, encryption technology, etc., have a common feature of denial-type defense strategies, that is, specify a series of access measures according to current needs, and deny access if they do not meet the specified security policies. If the data entering the firewall does not comply with the rules of the firewall, it will not be allowed to pass throu

Images