A network security protection method and system

Abstract

Embodiments of the present invention provide a network security protection method and system, wherein the method includes: based on security protection requirements, fusion analysis results, security service orchestration plans, threat handling information, security situation information, threat handling results, orchestration execution results, handling research and judgment At least one of the results and the results of situational research and judgment, determine the security service capability orchestration result; decompose the security service capability orchestration result and send it to the security management and disposal command unit, so that the security management and disposal command unit can be based on the The security service capability orchestration result determines the security service capability orchestration instruction and sends it to the network security object. The method and system provided by the embodiments of the present invention enable the components of the network security protection system to be integrated, organically integrated, coordinated with each other, and form a closed loop. The system has strong linkage, and can configure protection resources on demand and deal with network threats accurately and in a timely manner.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network security protection method and system. Background technique [0002] With the ever-changing security protection requirements and the continuous evolution of network attack technologies, security protection technologies must also be iterated. In order to effectively deal with security threats, it is necessary to have insight into the overall security risks of the network from a macro perspective, and dynamically deploy differentiated security protection resources to deal with threats against global security threats and local security threats, so as to avoid threats "jumping out of the local area and extending to the The whole network" even leads to the consequences of network paralysis. [0003] The existing network security protection system may include a software-defined security unit, a security situation analysis unit, a threat handling command unit, etc. a...

AI Technical Summary

Problems solved by technology

[0005] The embodiment of the present invention provides a network security protection method and system to solve the problem that each unit in the existing network security protection system cannot become an organic whole and the system linkage is poor

Images