Collaborative defense method for network protection and system

Abstract

The invention discloses a collaborative defense method for network protection and system. The system comprises a decision-making and deployment layer and a collaboration and monitoring layer, whereinthe decision-making and deployment layer uses an acquired network security early warning event, a defense intension is formulated according to the defense purpose of the network security and the current situation of the network security, a network defense strategy is later generated by a decision-making engine, and a defense task is deployed according to the defense strategy; the collaboration andmonitoring layer comprises a control center and network security devices, thereby realizing collaborative task deployment between network security devices and real-time monitoring on the network defense condition; the control center is in communication connection with the decision-making and deployment layer and the network security devices for data flow control and logical control; and the control center comprises a collaborative defense strategy analysis module, a collaborative defense strategy subscription module and a collaborative defense strategy distribution module. A collaborative defense solution with security perception, collaborative protection and centralized management as the core can be given, and an active, integrated and comprehensive dynamic security protection system isrealized.

Description

technical field

[0001] The invention relates to network security protection technology, in particular to a collaborative defense method and system for network protection. Background technique

[0002] With the rapid development of network services in recent years, the network security situation presents the following characteristics. The main manifestations are as follows: 1. The number of security vulnerabilities continues to grow rapidly. Due to the high complexity of network protocols, operating systems, and application software, as well as the uneven technical level of users, various security vulnerabilities inevitably exist in the network and host systems. The existence of loopholes is the main source of various security threats. The most fundamental reason why the current system security problems are intensifying is that the existence of loopholes cannot be completely avoided, and the loopholes are becoming more and more serious. the trend of. 2. The attack rhythm i...

Images