A network security early warning system and an early warning method

Abstract

A network security early warning system and an early warning method are provided. The system includes a network security patrol module for patrolling the network security intrusion information, a network security basic data extraction module for extracting abnormal information data, a network risk information identifying module for identifying the risk of the information extracted by the network security basic data extracting module, a network virus storage module for storing network virus data, a network virus feature matching module for comparing data of a potential intrusion host with network virus data stored in a network virus storage module, a network security early warning module for early warning the network security of the monitored host and a network virus feature matching modulefor evaluating the security level of the network virus data identified by the network virus feature matching module. The evaluation results are sent to the network security early warning module of the network security level evaluation module, through the real-time monitoring of network security, the good state of the network is effective maintained.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network security early warning system and an early warning method. Background technique [0002] The development of contemporary information technology promotes the generation, collection, transmission, sharing and analysis of data, making scientific and engineering research increasingly data-intensive. The degree of informatization of human society is getting higher and higher, the number of Internet users is growing exponentially, and groups of users with a certain level of network technology are rapidly forming and rising. With the increasing network traffic, network violations and emergencies They emerge in endlessly, causing great harm to national security, social stability, and people's interests. There are more and more abuses of the Internet, and the damage and losses caused to the Internet are shocking. Therefore, the whole society is more and more dependent on networ...

AI Technical Summary

Problems solved by technology

At present, there are a large number of security protection programs on the market, such as virus killing programs, Trojan horse killing programs, mail scanning programs, etc. However, the traditional information security protection system-firewall technology and intrusion detection technology, etc., have been unable to prevent the application layer, etc. Early warning of deep attack behavior, unable to realize real-time early warning and alarm of attack behavior