Network security protection method and system

Abstract

The embodiment of the invention provides a network security protection method and system. The method comprises the steps of determining a security service capability arrangement result based on at least one of a security protection demand, a fusion analysis result, a security service arrangement plan, threat disposal information, security situation information, a threat disposal result, an arrangement execution result, a disposal research and judgment result and a situation research and judgment result; and decomposing and issuing the security service capability arrangement result to a security management and disposal command unit, so that the security management and disposal command unit determines a security service capability arrangement instruction based on the security service capability arrangement result and issues the security service capability arrangement instruction to a network security object. According to the method and the system provided by the embodiment of the invention, all the constituent units of the network security protection system are integrated, organically fused and cooperated with one another to form a closed loop, the system linkage is strong, and protection resources can be configured as required and network threats can be accurately and timely handled.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network security protection method and system. Background technique [0002] With the ever-changing security protection requirements and the continuous evolution of network attack technologies, security protection technologies must also be iterated. In order to effectively deal with security threats, it is necessary to have insight into the overall security risks of the network from a macro perspective, and dynamically deploy differentiated security protection resources to deal with threats against global security threats and local security threats, so as to avoid threats "jumping out of the local area and extending to the The whole network" even leads to the consequences of network paralysis. [0003] The existing network security protection system may include a software-defined security unit, a security situation analysis unit, a threat handling command unit, etc. a...

AI Technical Summary

Problems solved by technology

[0005] The embodiment of the present invention provides a network security protection method and system to solve the problem that each unit in the existing network security protection system cannot become an organic whole and the system linkage is poor

Images