Network security management method, computing device and readable storage medium

Abstract

The invention discloses a network security management method which is suitable for being executed in a computing device, the computing device is connected with a data storage device and a security management server and manages a mobile terminal accessed to a target network, and the security management server acquires network access information of a user terminal accessed to the target network at intervals of first preset time. The network security management method comprises the following steps: authenticating the network access information of a user terminal in the data storage equipment; ifthe authentication of the network access information fails, sending an authentication failure message to the user terminal, and deleting a physical address corresponding to the user terminal from an allowed list of an address management server; and if the authentication succeeds, maintaining the state of the physical address corresponding to the user terminal in the permission list so as to maintain the communication connection between the user terminal and the target network. The invention also discloses corresponding computing equipment and a readable storage medium.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network security management method, computing equipment and a readable storage medium. Background technique [0002] At present, the data security of the enterprise office network has been promoted to a very important position. The existing office network access is basically based on domain authentication (AD) and certificate authentication (CA) for user identity verification. OA) account password, after identity authentication, after the company's internal CA system issues a certificate, the user can access the company's internal network and perform data access. This kind of simple user identity authentication cannot achieve enterprise data leakage prevention. Target. Therefore, Data Leakage Protection (DLP) has gradually become one of the most important security technologies in the market. However, after an enterprise implements the DLP technology solution, because the termin...

AI Technical Summary

Problems solved by technology

[0002] At present, the data security of the enterprise office network has been promoted to a very important position. The existing office network access is basically based on domain authentication (AD) and certificate authentication (CA) for user identity verification. OA) account password, after identity authentication, after the company's internal CA system issues a certificate, the user can access the company's internal network and perform data access. This kind of simple user identity authentication cannot achieve enterprise data leakage prevention. Target

Therefore, Data Leakage Protection (DLP) has gradually become one of the most important security technologies in the market. However, after an enterprise implements the DLP technology solution, because the terminal computer is in the hands of the employee, the employee may not start DLP or Do not use the company computer, or even modify the computer arbitrarily, destroy or delete the DLP client by deleting the process or reinstalling the operating system, etc., resulting in the DLP client not running normally, which is completely out of the company's control, causing the company to access The restrictions on network terminal equipment are useless, and office network data is still not effectively protected

Images