Integrity verification calculation method and system based on operation spanning tree state machine

Abstract

The invention discloses an integrity verification calculation system and method based on an operation spanning tree state machine, and the method comprises: an operation tree generation step: receiving a business request, generating an operation tree, and forming a state machine according to each state of the operation tree and a conversion condition of the operation tree; a fireproof cloud detection filtering step: carrying out integrity detection on a state machine of the operation tree, and filtering operation behaviors according to a detection result; and a brain-like computing step: providing computing power for the operation tree generation step and the fireproof cloud detection filtering step. The user operation behavior is converted into the operation tree state machine for integrity detection, bidirectional detection and comprehensive detection can be achieved, the risk that a service system is attacked is reduced, the behavior of a legal user has safety and non-repudiation, and the strong computing power provided based on brain-like computing can ensure the security, stability and high efficiency of the computing of the business system when massive users access in parallel.

Description

technical field [0001] The invention relates to the field of computer information security, in particular to a calculation method and system for verifying the integrity of a state machine based on an operation spanning tree. Background technique [0002] With the continuous development of computer and network technology and the rapid development of informationization at home and abroad, the application of e-commerce and large and medium-sized enterprise information systems has gradually become widespread and complicated. With the convenience and speed of information brought by the application of information network systems, the issue of information security has become the main problem faced by application development. [0003] Currently, gateway-type security products on the market, such as firewalls, isolation gatekeepers, and security gateways, mainly filter the link layer, transport layer, and network layer based on the source and destination MAC addresses, IP addresses, ...

AI Technical Summary

Problems solved by technology

[0004] Existing ordinary firewalls cannot resist the latest attack vulnerabilities without setting policies. The limit on the number of concurrent connections of the firewall can easily lead to congestion or overflow, and it is impossible to conduct integrity monitoring of network behavior from multiple dimensions such as user identity, role authority, application type, and transmission content. Computational recognition, and traditional firewalls based on local hosts cannot provide sufficient computing power and storage space support in the case of large-scale connections

Images