An active security defense system based on centralized management and control

Abstract

The invention discloses an active security defense system based on centralized management and control, which is characterized in that the system includes a decoy module and a monitoring module, and displays malicious activities visually; the decoy module creates, manages and deploys Decoy, and supports dynamic deployment and dynamic configuration of the decoy network; the monitoring module collects and analyzes the log data generated by the decoy module, monitors the interaction between the attacker and the decoy, and predicts and early discovers the attack activities of hackers in the enterprise network , and early warning, including four sub-modules of log collection, load balancing, front-end GUI and search engine. Through the invention, a network security defense based on deception technology is constructed, which can predict the attack of hackers and overcome the defects of traditional network security defense.

Description

technical field [0001] The invention relates to the technical fields of network security, SOC (Security operation center), active security defense, key infrastructure and deception, and in particular to a system of active security defense based on centralized management and control. Background technique [0002] Cybersecurity can be viewed as a series of asymmetric conflicts between defenders and attackers. The defender needs to be right (or safe) all the time to keep the attacker out, and the attacker only needs to be right once to be successful. This requires defenders to have a high level of security assurance on their networks, requiring a targeted risk management process. It is impossible to eliminate all security gaps when securing an enterprise network, so defenders must focus on risk minimization. One cyber risk management strategy is to find vulnerabilities in systems, assess the likelihood of those vulnerabilities occurring, and then determine the impact of those...

AI Technical Summary

Problems solved by technology

however, many security products that exist or are in development have not incorporated defensive deception techniques into the security strategy

Images