An intelligent configuration method of security policy based on target awareness

Abstract

The invention discloses a security policy intelligent configuration method based on target perception. By designing the process of target real-time perception, policy intelligent generation, policy analysis and detection, and policy intelligent optimization, the policy intelligent configuration is closely related to the defense target state, and security protection is realized. Intelligent configuration, rapid response and continuous optimization of policies help security operation and maintenance personnel to quickly configure security protection policies and respond to various network security threats in a timely and efficient manner.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a method for intelligently configuring a security policy based on target perception. Background technique [0002] With the rapid development of computer network technology, the scale of various information networks has become increasingly large and complex. Under the background of the rapid evolution of information technology and the increasingly serious security threats faced by networks and information systems, enterprises' awareness of information security protection Gradually strengthen the security of sensitive data and systems by deploying multi-layer security protection methods such as hosts, networks, applications, and data, which further increases the scale and complexity of information networks. For the security management and operation and maintenance personnel of the enterprise, it is usually necessary to manage and maintain multiple security areas of ...

AI Technical Summary

Problems solved by technology

However, in a large-scale network, there are many types and quantities of security protection devices. The policy configuration methods of different types of devices are different. The policy configuration requirements of similar devices in different usage scenarios are also different and focused. The correctness of security policy configuration There are also complex impacts on network connectivity, service availability, etc.

[0003] With the granularity of security policy control becoming more and more refined, higher requirements are put forward for the professional ability of security management and operation and maintenance personnel. The workload of policy configuration is heavy and manual operations inevitably make mistakes. These negligence leave opportunities for attackers

At the same time, under the background of the development of intelligent information technologies such as artificial intelligence and machine learning, the means of network attacks are also showing a trend of intelligence. Attackers can implement targeted attack means according to the target situation, and can also change the attack method according to the characteristics of the target. It also prompts the network security protection system to use intelligent means to detect problems in time, quickly adjust strategies and implement accurate responses. The research on network security policy configuration technology is also gradually developing in the direction of automation and intelligence. A variety of strategy automatic generation and verification analysis methods such as defense intent, but the adaptability and adaptability of security policy configuration and defense goals still need to be further improved

Images