Hierarchical network security protection integrated linkage defense method

Abstract

The invention discloses a hierarchical network security protection integrated linkage defense method, which comprises the following steps of: by analyzing the network security situation of a coal mine enterprise, proposing a technical principle of boundary protection, terminal protection and integrated comprehensive defense, physically isolating internal and external networks and dividing regions, and according to the importance of different regions, different levels of security domains are divided, and security protection is performed in a targeted manner. According to the method, internal and external network physical isolation and region division are performed, different levels of security domains are divided according to the importance of different regions, and security protection is performed in a targeted manner. The network protection difficulty is simplified, and the network traffic burden is relieved.

Description

technical field [0001] The invention relates to the technical field of network security protection, in particular to an integrated linkage defense method for layered network security protection. Background technique [0002] The traditional network security architecture is divided into partitions, domains, and boundaries to place security devices. This is often "independent", making it difficult to share data and cannot form an in-depth linkage defense. Nowadays, in the face of complex, targeted and purposeful cyber threats, we need to open up the information sharing of these security devices as soon as possible, gather these security data, and build a threat intelligence library based on big data. In addition, the traditional defense technology uses database data comparison, that is, to find threats by comparing them with viruses and threats that have appeared in the past. This defense technology is often relatively passive. Nowadays, we not only need to compare with the p...

AI Technical Summary

Problems solved by technology

[0005] (2) Single form of corporate network security protection

There is no unified planning for network security in the network construction, only a single increase of network security equipment when needed, the enterprise network protection objects and protection methods are "fragmented", various security equipment and defense strategies are not unified, and they fight independently, resulting in The continuous increase of network nodes leads to the waste of network resources, the increase of network bottlenecks, and the difficulty of finding fault points, etc., and it is impossible to form a unified security defense system, which has not significantly improved network security management and prevention.

[0006] (3) The lack of high-quality network security management personnel "shackles" the network security of enterprises

Often, most coal enterprises focus on equipment and do not pay attention to the allocation and training of talents. The main manifestations are: network management personnel are not professionals in network security and information technology, and the lack of professional knowledge makes it difficult to manage network security; Security management workers only focus on the network security work within the enterprise, and it is difficult to meet the needs of compound network management technicians in the current network security work; they do not pay enough attention to network security issues, change policies at will, and relax permissions, causing management problems. Missing, ineffective management and other issues

Images