A blockchain-based network security operation and maintenance and defense method and system

Abstract

The present invention provides a blockchain-based network security operation and maintenance and defense method and system, which periodically stores the operation and maintenance data of network equipment in different ways according to the importance, that is, uploads security logs and configuration data to the chain storage, and then regularly compare the second configuration data of the current network device with the configuration data on the chain, and when a change in the configuration data is detected, the automatic defense is started in time based on the corresponding smart contract; and / or, the current security log is analyzed Data, when a network security incident is detected, the source of the attack can be traced with the help of the log data on the chain, and automatic defense will be initiated based on the corresponding smart contract. In this way, the operation and maintenance data will not be tampered with, and the transformation of the operation and maintenance method from obtaining evidence after the event to depositing evidence during the event is realized, so as to improve the network security protection capability.

Description

technical field [0001] The present invention relates to the technical field of network information security, in particular to a blockchain-based network security operation and maintenance and defense method and system. Background technique [0002] In recent years, organized cyber attacks have been extremely active, malware threats have intensified, data leakage incidents have increased, and various cyber-related threats have also continued to increase. The threat of network security has become one of the biggest threats to our national security today. [0003] At present, network security is mainly improved by setting up network security devices or security protection systems in the network. Specifically, during the operation of network security equipment and security protection systems, a large number of security logs such as defense logs, operation logs, and behavior logs will be generated. When facing network security attacks, various security logs can be used as securi...

AI Technical Summary

Problems solved by technology

However, since network security devices and security protection systems do not have log tamper-proof functions, they cannot effectively prevent attacks involving deletion and tampering of log data.

Images