A security defense system and method

Abstract

The invention discloses a security defense system, which includes a core switch, a security resource pool and multiple terminals, the security resource pool contains a micro-isolation subsystem and multiple security components; the core switch is used to guide received access traffic to the security The resource pool is cleaned and protected by each security component in the security resource pool and then sent to the corresponding terminal; each terminal is used to accept the corresponding access when the received access traffic is determined to be safe traffic based on its own micro-isolation strategy; Report its own traffic information to the micro-isolation subsystem; the micro-isolation subsystem is used to output and display the traffic details and access relationship of each terminal, so as to adjust the micro-isolation strategy of the corresponding terminal based on the traffic details and access relationship of each terminal. By applying the technical solution provided by the embodiment of the present invention, the unified security protection of the east-west and north-south traffic is carried out, and the security of the private cloud is enhanced. The invention also discloses a safety defense method, which has corresponding technical effects.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a security defense system and method. Background technique [0002] With the application of the Internet in various fields more and more widely, various network attacks are also changing and increasing. In the private cloud built by enterprises and institutions, a large number of terminals may be deployed. Once attacked by the network, it will cause large economic losses to enterprises and institutions. Terminals under network attack are mainly due to weak security defense capabilities or loopholes in the system and application itself. [0003] At present, there are many kinds of network attacks. The traditional defense method is mainly to defend through firewalls. Firewalls are deployed at network ingress and egress to clean incoming and outgoing traffic and intercept attack traffic. [0004] This method is too simple and the defense capability is weak. Once the inter...

AI Technical Summary

Problems solved by technology

[0004] This method is too simple and the defense capability is weak. Once the interception fails, the attack traffic enters the private cloud, and it is easy to move horizontally between terminals, which poses a great security risk.

Images