Network security active defense resource configuration method and system

Abstract

The invention relates to the technical field of production devices, in particular to a network security active defense resource configuration method and system, and provides the following scheme that the method comprises the following steps: establishing a risk transfer model of a network security node, and taking a network overall transfer risk as a target function of network security active defense resource configuration; and establishing constraint conditions of network security active defense resource configuration, and configuring network security active defense resources according to the target function and the constraint conditions in combination with node features and service features of a deployment environment. According to the method, the multi-node and multi-service characteristics of the real deployment environment are combined, reasonable optimal configuration of the energy internet network security active defense resources of the actual intelligent park system is realized, and the blindness problem of development of defense resource configuration based on experience in the prior art is avoided.

Description

technical field [0001] The invention relates to the field of energy Internet, in particular to a network security active defense resource allocation method and system. Background technique [0002] With the continuous integration of smart grid and "Internet +" technology, Energy Internet has become a current research hotspot. While realizing the integration of "information flow, energy flow, and business flow", the multi-level network structure of the Energy Internet involves various cutting-edge technologies, covers various types of machinery and equipment, and integrates multiple complex applications, which increases the system's exposure to cyber attacks. possibility. [0003] The energy Internet network security defense system in the prior art is a passive protection system composed of firewalls, anti-virus software, encryption algorithms, intrusion detection systems and other technologies, which are mainly used to block known threats and repair system vulnerabilities. ...

AI Technical Summary

Problems solved by technology

However, in the current increasingly complex energy Internet environment, passive protection methods cannot cope with new types of attacks that are constantly updated, resulting in an asymmetrical situation in which network security defense is easy to attack and difficult to defend.

Images