Vulnerability defense method and system

Abstract

The invention provides a vulnerability defense method and system, and the method comprises the steps: carrying out the independent flow monitoring and business volume monitoring of each pre-divided business module based on a pre-constructed neural network model, predicting the future business volume of each business module, and obtaining the predicted business volume corresponding to each business module; when monitoring that the traffic of any business module is abnormal and / or the business volume is higher or lower than the predicted business volume, detecting whether the business module is attacked; and if the attack is detected, determining an attack type, and executing a defense strategy and a counterattack strategy according to the attack type. According to the scheme, the business modules are divided, the neural network model obtained through pre-training is used for carrying out independent flow monitoring and business volume monitoring on each business module, when any business module is attacked, attacks are defended in time, so that the security risk is reduced, and the attacks are defended in a targeted mode according to the attack types. The defense efficiency is improved, and the overall safety level is improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a vulnerability defense method and system. Background technique [0002] With the rapid development of the Internet, the network information security of enterprises is very important. [0003] The current defense method for network information security in enterprises is to use security defense software to defend network information. However, this kind of security defense is more dependent on software version updates. For the defense of new vulnerabilities and attacks, a new version must be installed. It can only be done on the basis of software, the real-time performance is poor, and it cannot quickly respond to the complex and changeable Internet environment. Contents of the invention [0004] In view of this, the embodiments of the present invention provide a vulnerability defense method and system to achieve the purpose of improving defense flexibility, reducing se...

AI Technical Summary

Problems solved by technology

[0003] The current defense method for network information security in enterprises is to use security defense software to defend network information. However, this kind of security defense is more dependent on software version updates. For the defense of new vulnerabilities and attacks, a new version must be installed. It can only be done on the basis of software, the real-time performance is poor, and it cannot quickly respond to the complex and changeable Internet environment

Images