A method, server and system for transferring network attack surface

Abstract

The invention discloses a method, a server and a system for transferring network attack surfaces, collecting copies of data fragments on each network node, extracting exploitable attack vectors, merging the copies of data fragments with historical big data, and analyzing whether the data fragments exist Abnormality, whether there is a logical association between multiple abnormal data fragments, so as to determine and mark the abnormal point, and obtain the potential attack trajectory and the security hole of the network node. When a single network node is found to be attacked, the address of the network node is randomly modified and ports, to prevent the network node from being continuously attacked, and to protect other network nodes close to the network node from being attacked, so as to track the attack surface in a large number of network nodes and help administrators transfer attacks to ensure the security of network nodes Normal use.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a method, server and system for transferring a network attack surface. Background technique [0002] The current network communication is facing more and more hidden security issues. Many attacks come from hidden and fragmented forms. The vulnerability points and attack links of a single network node will constitute multiple attack surfaces. The existing methods of preventing network attacks will fail. Especially the current network usually has a large number of network nodes, and the attacker can disperse the fragments on various network nodes, so as to avoid being discovered. [0003] At the same time, after a single network node is found to be attacked, how to prevent the network node from being continuously attacked, and how to protect other network nodes close to the network node from being attacked. These become urgent technical problems to be solved. ...

Images