A security device data communication protocol for cooperative network defense

Abstract

The invention discloses a data communication protocol for safety equipment for cooperative network defense, which belongs to the technical field of network defense. The communication protocol of the present invention is used for data communication between the creator of the cooperative network defense command and the receiver of the network defense command, and is characterized in that, after receiving the defense means, the creator of the network defense command creates a network defense command according to the communication protocol, And send it to the receiver of the network defense command. After successfully receiving the network defense command, the receiver of the network defense command creates a network defense command response to the received network defense command according to this communication protocol, and sends it back to the creator of the network defense command; in this communication protocol In , the recipient of the network defense command is a security device. This protocol responds to endless network threats by keeping the content of the protocol updated, and has the advantages of flexible changes, precise content, and no ambiguity.

Description

technical field [0001] The invention belongs to the technical field of network defense, and in particular relates to a data communication protocol for safety equipment for cooperative network defense. Background technique [0002] Today, cyber defenses leverage the sharing of cyber threat intelligence to detect and contain attackers before they start exploiting vulnerabilities. Mature foreign threat intelligence standards include network observable expressions (CyboX), structured threat information expressions (Structured Threat Information e Expression, STIX) and trusted automated exchange of indicator information (Trusted Automate de Xchange of Indicator Information, TAXII). STIX specifications can describe many aspects of threat intelligence The characteristics of threats, including threat factors, threat activities, security incidents, etc., are used by TAXII to transmit threat intelligence. Users will be able to pass anonymized data to their security vendors, and secur...

AI Technical Summary

Problems solved by technology

[0003] The goal of these specifications is to share network intelligence, but it is far from enough to share network intelligence with major security vendors

In recent years, with the continuous update and faster spread of network threats, even if the existing defense system can quickly receive network threat intelligence, it is different from the analysis timeliness of different security devices. Response, can handle unpredictable

Images