Method and system for generating threat handling policy in network

Abstract

The embodiment of the invention provides a threat disposing strategy generation method and a threat disposing strategy generation system in a network. The method comprises the following steps: according to received alarm information, determining an object threatened in the network; based on a security guarantee target library created in advance, determining a security guarantee target of the object; according to the alarm information and / or the security guarantee target, in a disposing strategy template library, acquiring a target disposing strategy template; according to the alarm informationand the target disposing strategy template, generating a disposing strategy, thereby disposing the threat. By the method and the system provided by the embodiment of the invention, through disposingstrategy uniform description, and based on the disposing strategy template library, the threat disposing strategy can be generated as needed after the alarm information is received, a basis is provided for differentiated linkage disposal of the threat, and disposing efficiency and disposing effects are improved.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of network security, and in particular, to a method and system for generating threat handling policies in a network. Background technique [0002] The rapid development of mobile communication technology, network technology and information technology, as well as the application requirements for frequent cross-domain business interaction, have promoted the extensive interconnection and intercommunication of various networks across units, regions and management domains, and promoted the use of dedicated networks, space-ground integrated networks, The Internet of Things and the network of various service systems (such as: electronic credential service system, e-commerce system, and e-government system) are typical representatives, and a large-scale Internet network with hierarchical management as an important feature is gradually formed. However, while the large-scale Internet provides con...

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide a method and system for generating threat handling strategies in a network, which are used to solve the defects of poor handling effects, low handling efficiency and inability to support differentiated linkage handling of threats in the prior art, and improve handling Efficiency can also minimize the extent to which the network is affected by threats, thereby ensuring network security

Images