Active defense method and system for information network security

Abstract

The invention provides an information network security-oriented active defense method and system. The method comprises the following steps: sending a first request for verifying the integrity of a bottom layer code of a server platform to the server platform; receiving the first response information for the first request from the server platform, and judging whether the application program is tampered or not based on the first response information; if yes, controlling the server platform to stop starting, and if not, sending a second request used for evaluating the safety state of the server platform to the server platform; receiving second response information aiming at the second request from the server platform, evaluating a platform security risk value based on the second response information, and determining a security defense strategy to realize active defense. According to the scheme, the problem that the information network is difficult to resist complex network attacks is solved.

Description

technical field [0001] The invention belongs to the technical field of network security management, and in particular relates to an active defense method and system for information network security. Background technique [0002] In response to the increasing number of network security incidents, different departments such as enterprises and governments have deployed various network security products to ensure the normal implementation of network applications. Such as firewall, intrusion detection, identity authentication, data encryption and decryption, secure communication protocol, fault-tolerant technology, log auditing, etc. "Based on the principle, build a security wall to defend against attacks. In this mode, the server's security protection measures are still passive defense; on the one hand, through the deployment of various types of physical isolation devices, firewalls and intrusion detection equipment, the identification and blocking of viruses, Trojan horses, an...

AI Technical Summary

Problems solved by technology

However, the current defense measures are gradually difficult to adapt to the spread and execution of malicious code in the new network security environment formed by the continuous expansion of network system scale and the gradual transformation of servers to cloud platforms.

Images