Method and equipment for intelligently generating network protection strategy in virtual environment

Abstract

The invention provides a method and equipment for intelligently generating a network protection strategy in a virtual environment. The method comprises the following steps: grouping data in a networkprotection log according to keywords to obtain a first set; querying in the network protection log by using each record in the first set to obtain a second set; screening the second set by using a third set composed of virtual service resources of the management platform according to the source IP to obtain a first subset and a second subset; screening the first subset by using the third set according to the destination IP to obtain a third subset and a fourth subset; marking the high-risk IPs and ports in the second subset, the third subset and the fourth subset; and pushing the marked secondsubset, third subset and fourth subset to a network protection automatic configuration service for network protection. According to the invention, a security administrator in a virtualization environment can be helped to quickly configure the network protection strategy at the initial stage of service resource operation, the efficiency and accuracy are improved, and the risk caused by misoperation is reduced.

Description

technical field [0001] This field relates to the computer field, and more specifically relates to a method and device for intelligently generating network protection policies in a virtualized environment. Background technique [0002] With the development of virtualized resources, the security of virtualized resources becomes more and more important. Among them, network security has always been an important part of virtual resource security protection. Network security generally achieves the purpose of network protection by configuring five-tuple policies. However, in actual application scenarios, at the initial stage of security software installation, security administrators cannot accurately configure network protection policies among various service resources due to the large number of virtualized resources carrying services. Moreover, the configuration of the five-tuple policy is cumbersome, and once the configuration is wrong, normal business operation will be affecte...

AI Technical Summary

Problems solved by technology

However, in the actual application scenario, at the initial stage of security software installation, due to the large number of virtualized resources that carry services, the security administrator cannot accurately configure the network protection policies among various service resources.

And the five-tuple policy configuration is cumbersome, once the configuration is wrong, it will affect the normal business operation

Images