Network user group security management technology based on proprietary algorithm

Abstract

The invention relates to a network user group security management technology realized based on a proprietary algorithm, which can realize multiple isolation of a network, isolate the network into a plurality of communication user groups according to specific requirements, and effectively reduce the communication action domain of network users. Illegal communication is isolated. And the method canbe applied to development of upper computer application management software according to specific requirements, so that unified configuration and unified monitoring management of a plurality of isolated user groups are realized.

Description

technical field [0001] The present invention relates to the field of network security, in particular to the field of industrial Internet network security and management, and specifically refers to a network user group security management technology based on a proprietary algorithm. Background technique [0002] With the development of computer and network technology, especially the deep integration of informatization and industrialization and the rapid development of the Internet of Things, threats such as viruses and Trojan horses are spreading to industrial control systems, and information security issues in industrial control systems have become increasingly prominent. However, the current network grouping technology has many defects, such as: complex grouping operation, high technical difficulty, and high requirements on the ability of construction personnel; the realized grouping topology is simple, which cannot meet the increasingly complex industrial Internet networkin...

AI Technical Summary

Problems solved by technology

However, there are serious problems with the current firewall application

For example: At present, many firewalls support content filtering, anti-virus and IDS, etc., but the actual application effect is not good.

Because when these functions are supported, filtering will involve application layer packet analysis, which consumes a lot of CPU

The activation of these functions will lead to a sharp drop in performance. The original 100M processing capacity may drop to a few megabytes, resulting in serious congestion or even paralysis of the network, which loses the meaning of the existence of the firewall.

[0004] In addition, many traditional network security configurations are implemented based on the command line, which has the disadvantages of cumbersome configuration, too many commands, difficult to master, difficult to operate, and even for some complex networks, difficult to implement and difficult to maintain.

Images