A network security situation awareness system and method based on local area network

Abstract

The invention discloses a network security situation awareness system and method based on a local area network, comprising a virus monitoring module, a data analysis module, a controller, a storage module, a data processing module, a CPU monitoring module, a network speed monitoring module, a security evaluation module and a display module; the data analysis module is used to receive the host information infected by the worm virus in the preset time period and analyze the host information to obtain the equipment threat table information and virus threat table information; the data processing module is used to receive the virus signal transmitted by the virus monitoring module. The attack value Pg is obtained by data analysis; the CPU monitoring module is used to monitor the real-time utilization rate of the CPU of the host device, and perform steady-state analysis on the real-time utilization rate to obtain the steady-state value Ui; when the security assessment module receives the attack value Pg, it will automatically combine The steady state value Ui, the real-time usage rate group Fa and the real-time network access speed are used for security analysis, which makes the results more accurate.

Description

technical field [0001] The invention belongs to the field of network security and relates to security awareness technology, in particular to a network security situation awareness system and method based on a local area network. Background technique [0002] The patent with the notification number CN105100013B discloses a method for sensing network security equipment, network security equipment and a controller, which solves the problem that the controller cannot perceive network security equipment in the prior art. The method includes: the network security device receives a Link Layer Discovery Protocol LLDP message; the network security device adds device information of the network security device to the LLDP message, and sends the device information added with the network security device send the LLDP message to the controller, so that the controller can perceive the network security device through the device information of the network security device in the LLDP message....

AI Technical Summary

Problems solved by technology

[0003] However, its perception and monitoring of network security only relies on the controller to perceive the network security device through the device information of the network security device in the LLDP message. , and related virus attack situations are objectively and comprehensively reflected, the results obtained are not accurate enough, and high-risk host devices cannot be intelligently identified, and different security protections are implemented for different virus attacks, which cannot provide effective help for the expansion and strengthening of the perception system ; In order to solve the above defects, a solution is now provided

Images