Network security policy optimization method

Abstract

The invention relates to a network security policy optimization method, which comprises the following steps of: A, enabling a network security policy optimization system to periodically receive a network security policy of each firewall, and preprocessing the network security policy to obtain policy information of each firewall; B, calculating the hit rate of a single strategy of each firewall according to the obtained strategy information; C, calculating a comprehensive score of a single strategy of each firewall according to the hit rate and the strategy importance of the strategy; D, calculating the final score of each firewall single strategy according to the comprehensive score of the strategy; and E, performing sorting according to the final score of each policy of the firewall, andadjusting and optimizing the policies according to the sorting. When the network security strategy is optimized, the strategy hit rate and the importance level of the strategy are comprehensively considered, and the strategy association relationship in the high-availability architecture is combined, so that the high-priority strategy is ensured to be high in hit rate and importance weighting, andthe priorities of related strategies are ensured through the association relationship.

Description

technical field [0001] The present invention relates to the technical field of network information security, and specifically relates to a method for optimizing network security policies. Background technique [0002] As the main means of network security prevention and protection, network security policy maintains network system security and protects network resources from illegal access. Various security policies cooperate with each other to protect the network. With the continuous information construction of enterprises, more and more network security policies are configured on security devices. On the one hand, too many network security policies may lead to performance bottlenecks of firewalls or other network security devices; on the other hand, many policies For a long time, there is no effective way to organize them because they have not been hit. Over time, a vicious circle has been formed. Redundant strategies accumulate more and more, but new network security stra...

AI Technical Summary

Problems solved by technology

However, prioritization is performed directly according to the hit rate of each network security policy, so that the network security policies with no hits for a long time can be screened out and cleaned up, but they are not screened according to the importance of the business, and it may be related to important business Related policies are cleaned up

Images