A calculation method of a network security situation index system
A network security and index system technology, applied in the computing field of the network security situation index system, can solve the problems of insensitive indicators, easy to be submerged, unclear physical meaning of network security situation indicators, etc., and achieve the effect of solving vague definitions
Inactive Publication Date: 2019-05-21
INTEGRATED ELECTRONICS SYST LAB
View PDF5 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
At present, most of them adopt the weighted average method, and the final calculated network security situation indicators have unclear physical meaning, insensitive indicators, and dangerous indicators are easily submerged, and cannot reflect the actual situation of network security.
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0015] Embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.
[0016] Such as figure 1 Shown, is the logic flow diagram of the present invention; As figure 2 Shown is a schematic diagram of the structure of the index system of the present invention. A firewall-based network security situation index system calculation method, comprising the following steps:
[0017] Step 1. Establish a firewall device model. According to the characteristics of the firewall, set typical index components reflecting the security characteristics of the firewall: a is the port traffic, h is the policy hit rate; set the port traffic warning threshold to 20M, and the alarm threshold to 40M, set The policy hit rate early warning threshold is 60%, and the alarm threshold is 80%;
[0018] Port traffic is the amount of data flowing through the port within a certain period of time. The definition of port traffic needs to be quantified acco...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention relates to a calculation method of a network security situation index system. The calculation method comprises the following steps: establishing a firewall equipment model; Designing a safety index calculation model for each index of the firewall, setting a safety threshold value, an early warning threshold value and an alarm threshold value of each index, and calculating that the current index is in a safety, early warning and alarm area; Designing a security index calculation model of the firewall for the firewall with the plurality of security indexes; And designing an overallfirewall security index calculation model for all firewall equipment in the network, and calculating a total index of all firewalls in the network. The network security situation can be early warnedand alarmed, the specific firewall equipment is positioned according to the abnormity of the total index, and the calculation result is quantified; Abnormal indexes are prevented from being submergedand potential system threats cannot be found; The problem that a traditional network security situation calculation result is fuzzy in definition is solved.
Description
technical field [0001] The invention mainly relates to the technical field of network security, and proposes a calculation method of a network security situation index system for representative firewall equipment. Background technique [0002] A normal network environment is generally supported by security devices. Each device has a variety of indicators to indicate the security level of the current network operation. The units and security scopes of these security indicators are also different. Facing the network How to uniformly express and more reasonably reflect the network security situation of the current network environment has become a difficult problem for the numerous device objects in the environment. At present, most of them adopt the weighted average method, and the final calculated network security situation indicators have unclear physical meaning, insensitive indicators, and dangerous indicators are easily submerged, and cannot reflect the actual situation of...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06H04L12/24
Inventor 张东院胡信超刘涛刘晓亮张涛
Owner INTEGRATED ELECTRONICS SYST LAB