Security event early warning method for multi-dimensional stereoscopic network

Abstract

The invention discloses a security event early-warning method for a multi-dimensional stereoscopic network. The method comprises the steps: analysis of a security event is carreid out in a network system according to the characteristics of network security through combining with the current state and future development trend of national network security; by employing an early-warning system related technology based on network security situation awareness, a multi-dimensional stereoscopic security event combined early warning mechanism is established, so that the early warning notification service requirements of conventional, emergency and special security events and network security situations are met. The early warning system based on network security situation awareness utilizes relatedtechnologies to analyze and understand situations, can discover and early warn in the shortest time, and is convenient for preparing emergency and disposal schemes.

Description

technical field [0001] The invention relates to the technical field of security early warning, in particular to a multi-dimensional network-oriented security event early warning method. Background technique [0002] With the development of the Internet and network technology, the scale and application fields of the Internet continue to grow, and its basic and overall status gradually strengthens. features such as simplification and direct targeting. Network security problems emerge in endlessly. Illegal activities such as network intrusion and network attack threaten the information security of our country. Various security incidents such as intrusions and attacks pose more and more threats and harms to the network. It is urgent to establish and improve a security incident early warning system to improve the overall network security level. [0003] However, the current network security protection mainly relies on single-point security devices such as virus detection, intru...

AI Technical Summary

Problems solved by technology

[0005]However, the existing early warning technology for security incidents is lagging behind, because network intrusion behaviors tend to become more complicated and indirect, especially when the network is too complex and the amount of data With the current rapid development, the evaluation efficiency is particularly low, and it is unable to meet the tasks and goals of security early warning:

[0006]1) Traditional network security situational awareness has the problems of data fragmentation and one-sided situational awareness, making it difficult to fully and completely assess the harm and loss caused by security incidents nationwide. In particular, the social impact of security incidents on society and its public interest is lacking

[0007]2) The existing security situational awareness lacks the prediction of possible cyber threat attacks in the future, and lacks effective means of security event prediction. One of the core problems of early warning technology is Attack prediction and the degree of damage of the attack, the purpose is to infer future quantitative results of cyber attacks caused by attackers or authorized agents

Images