A Method for Mapping Internet Security Control Policy Rules

Abstract

The present invention discloses an internetwork interconnection safety control strategy rule mapping method, belonging to the field of network safety. The method comprises the steps of: completing mapping from a subnet name to a subnet network section in an object mapping database to perform strategy edition, and generating a safety control strategy after edition; reading the safety control strategy by a morphological analysis module, sending the safety control strategy to a grammatical analysis module to identify keywords, generating corresponding phrases to execute reading operation, fillingin corresponding nodes to generate corresponding concrete ASTs; mapping the subnet name to a network section value by the semantic analysis module to replace the content of the subnet name nodes in the concrete AST and generate an AST with semantics; converting the AST with semantics; to a safety rule in an XML form by a safety rule normal form matching module; and converting the safety rule in the XML form to executed rule codes or commands by a safety rule generator to complete mapping. The internetwork interconnection safety control strategy rule mapping method solve the problems that business workers are difficult to configure, maintain, control and understand for the rules and achieve a simple and effective management mode.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to a method for mapping security control strategies and rules of Internet interconnection. Background technique [0002] The existing space-ground integrated network is shared by the military and civilians, but the network security domains are highly differentiated, making it difficult to control the security of interconnection between networks. It is an effective means to achieve fine-grained security protection and defense through the security control strategy of Internet interconnection. The Internet security control strategy is designed based on human cognition, risk assessment, and vulnerability analysis. The control strategy is specific to the rules that can be operated, and it is necessary to propose an effective and intelligent mapping method that automatically maps from the Internet security control strategy to the control rule. [0003] Various network service...

AI Technical Summary

Problems solved by technology

However, there are still some areas that need to be improved and optimized in the management of business rules at present, such as hard binding of business rules and system functions, numerous and complex business rules, free and inconsistent description of business rules

This management method will lead to a series of problems, such as difficult to configure, difficult to maintain, difficult to expand, difficult to customize, difficult to reuse, difficult to control and difficult to understand, etc.

Images