Automatic configuration management system and method for network security

Abstract

The invention relates to an automatic configuration management system and method for network security. The system comprises an initialization module, a safety monitoring module, a safety evaluation module, a safety decision module, a configuration module and a configuration library, and the method comprises steps of assigning an initial trust degree of each monitoring object in the monitoring area; obtaining a safety state value and a safety demand value corresponding to each monitoring object one by one; evaluating and analyzing the safety coefficients of all the monitoring objects accordingto all the initial trust degrees, all the safety state values and all the safety demand values of all the monitoring objects and obtaining a security coefficient value corresponding to each monitoringobject in a one-to-one mode, formulating a configuration strategy table according to all the security coefficient values of all the monitoring objects, and extracting a configuration file required byeach monitoring object from a configuration library to configure each monitoring object according to the configuration strategy table. On the premise of ensuring the security of the monitoring object, security configuration is performed according to the configuration strategy table, so that the configuration efficiency and the management efficiency of the configuration system are greatly improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an automatic configuration management system and method for network security. Background technique [0002] With the development of network and information technology, the network is gradually changing the way of human life and work, and has had a huge and far-reaching impact on all walks of life. The networked society not only brings many conveniences to people's daily life, but also endangers the information security of individuals or enterprises, and even has a profound impact on national security and international relations. [0003] Nowadays, the solution to information security problems of most domestic enterprises is still to install anti-virus software. However, with the highly developed Internet and mobile Internet, such security measures are far from meeting the needs of enterprise network information security. The network management personnel of most units, e...

AI Technical Summary

Problems solved by technology

[0003] Nowadays, the solution to information security problems of most domestic enterprises is still to install anti-virus software. However, with the highly developed Internet and mobile Internet, such security measures are far from meeting the needs of enterprise network information security.

The network management personnel of most units, especially those of small and medium-sized enterprises, have very weak security awareness, and the level of security protection is low, and they have no independent ability to complete the most basic network security configuration, resulting in great security risks for the unit

[0004] At present, the relevant technologies for network security configuration mainly focus on the security configuration of equipment, systems and software, but in these security configurations, basically the same security configuration strategy is adopted, that is, the same type of equipment, system or software When there are potential threats, the same security configuration files are basically used in the configuration process, and the security configuration files are not classified according to the security level, which will cause: 1. The security requirements of some devices, systems and software are not very high , the security level of the security configuration file that needs to be configured does not need to be so high, which will cause a waste of security configuration file resources and reduce configuration efficiency; 2. Once all devices, systems or software are found to be in danger, the configuration will be synchronized Security configuration files, without setting priorities for these devices, systems, and software, and configuring them according to priorities, will greatly reduce configuration efficiency, and even cause system crashes, affecting the normal use of the network

Images