Network dynamic defense system and method

Abstract

The invention provides a network dynamic defense system and method. The system comprises a route distribution sub-system, a target sub-system and an active defense sub-system. The route distribution sub-system comprises a router, a client and a server; the router is used for detecting legality of users from the client, forwarding legal users which pass the detection to the server and forwarding doubtable users which are failed in the detection to the target sub-system; the target sub-system is used for recording attack behaviors of the doubtable users, performing secondary identity authentication on the doubtable users based on an identity knowledge base, forwarding normal users to the route distribution sub-system again and forwarding the doubtable users to the active defense sub-system;the active defense sub-system is used for extracting and analyzing attack characteristics and backing up and / or restoring important data. By adding dynamicity, randomness and indetermination of the defense system, a system defense capacity is put forth; and the network dynamic defense system increases the attack complexity of attackers and efficiently deals with the network attacks.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network dynamic defense system and method. Background technique [0002] Today, the Internet has penetrated into all aspects of work and life and has become an indispensable fifth dimension. However, new types of network attacks emerge in an endless stream, and the network security situation is becoming increasingly severe. Vulnerabilities are the premise of network attacks. Due to the objective existence of network security vulnerabilities, coupled with the static, similarity and determinism of the system, network security problems cannot be completely solved by digging and plugging loopholes. Even if the defender fixes most of the loopholes in time, the attacker only needs to exploit a small number of loopholes to gain an asymmetric advantage over the defender, forming an asymmetrical situation of "easy to attack but difficult to defend". [0003] Because the tradi...

AI Technical Summary

Problems solved by technology

[0016] However, this technology relies heavily on the robustness and stability of the basic network, and relies on a complete detection mechanism, and its protection capabilities are limited

Once an attacker reaches a host, the technology provides no protection

Images