Automated security protection method based on association of camouflage agent and dynamic technology

Abstract

The invention relates to an automatic security protection method based on the association of a camouflage agent and a dynamic technology, and the method specifically comprises the steps: 1, setting the camouflage agent: constructing a new Web service on the basis of an original Web server, and enabling the new Web service to contain a plurality of security holes, thereby inducing an attacker to enter the new Web service; 2, setting a flow analysis system, importing the flow in the disguise agent into a flow analysis system; 3, obtaining fingerprint information according to a flow analysis system, 4, setting a dynamic protection system, and storing the hacker portrait into the dynamic protection system; and 5, generating a user portrait when the user accesses the Web service, matching the user portrait with the hacker portrait in the dynamic protection system, and blocking an attacker in real time if the user portrait is successfully matched with the hacker portrait in the dynamic protection system. According to the invention, blocking is carried out based on the unique hacker portrait, and even if an attacker continuously changes the IP, the attacker can be identified for blocking,so that an accurate and real-time protection effect is achieved.

Description

technical field [0001] The invention relates to an automatic safety protection method based on a masquerade agent associated with a dynamic technology, and belongs to the technical field of network safety attack and defense. Background technique [0002] With the rapid development of the Internet and the continuous innovation and breakthrough of the new generation of information technology, the Internet has brought earth-shaking changes to all aspects of people's lives. At the same time as the digitalization of the Internet is developing, the Internet environment is also subject to a large number of cyber attacks, and the attack methods emerge in endlessly, and the cyberspace security issues faced are becoming more and more complex and diverse. However, in the existing information security system, security managers are still looking for loopholes and patching. The existing protection technology mainly relies on the intrusion detection system. Traditional security signatures...

AI Technical Summary

Problems solved by technology

Traditional defense methods based on features and rules are starting to show shortcomings: From the perspective of blocking attack sources, they mainly rely on source IP addresses, and the protection method is relatively simple and the accuracy is not high, which may easily lead to false interception

From the perspective of security operation, for massive log information, the cost of manual intervention is high, the efficiency is low, and the operation and maintenance management is difficult

Images