Intelligent security policy configuration method based on target perception

Abstract

The invention discloses a security policy intelligent configuration method based on target perception, and the method comprises the steps: designing the processes of target real-time perception, policy intelligent generation, policy analysis and detection, and policy intelligent optimization, enabling the policy intelligent configuration to be closely associated with the state of a defense target, thereby achieving the intelligent configuration, quick response and continuous optimization of a security protection policy, assisting safety operation and maintenance personnel are assisted to quickly configure safety protection strategies, and timely and efficiently processing various network safety threats.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to an intelligent configuration method of a security policy based on target awareness. Background technique [0002] With the rapid development of computer network technology, the scale of various information networks has become increasingly large and complex. Under the background of the rapid evolution of information technology and the increasingly serious security threats faced by networks and information systems, the awareness of enterprises in information security protection Gradually strengthen the security of sensitive data and systems by deploying multi-layer security protection methods such as hosts, networks, applications, and data, which also further increases the scale and complexity of information networks. For enterprise security management and operation and maintenance personnel, it is usually necessary to manage and maintain multiple security areas of t...

AI Technical Summary

Problems solved by technology

However, in a large-scale network, there are many types and quantities of security protection devices. The policy configuration methods of different types of devices are different. The policy configuration requirements of similar devices in different usage scenarios are also different and focused. The correctness of security policy configuration There are also complex impacts on network connectivity, service availability, etc.

[0003] With the granularity of security policy control becoming more and more refined, higher requirements are put forward for the professional ability of security management and operation and maintenance personnel. The workload of policy configuration is heavy and manual operations inevitably make mistakes. These negligence leave opportunities for attackers

At the same time, under the background of the development of intelligent information technologies such as artificial intelligence and machine learning, the means of network attacks are also showing a trend of intelligence. Attackers can implement targeted attack means according to the target situation, and can also change the attack method according to the characteristics of the target. It also prompts the network security protection system to use intelligent means to detect problems in time, quickly adjust strategies and implement accurate responses. The research on network security policy configuration technology is also gradually developing in the direction of automation and intelligence. A variety of strategy automatic generation and verification analysis methods such as defense intent, but the adaptability and adaptability of security policy configuration and defense goals still need to be further improved

Images