Network security protection method and system

Abstract

The invention provides a network security protection method and system, and relates to the technical field of network security. The method comprises the following steps: deploying a shadow system to a network protection platform, and establishing a virtual network; and performing secure partitioning on the virtual network according to a preset partitioning method to obtain a plurality of partitions. And detecting the network state of each partition in real time, and if any partition has data exception, obtaining the exceptional data of the partition and the corresponding network flow. And generating a virtual honeypot based on the abnormal data and the corresponding partition, and introducing the corresponding network traffic into the virtual honeypot to obtain an attack behavior. And inputting the attack behaviors into the attack behavior analysis models matched with the corresponding partitions to obtain attack characteristics. And determining a corresponding security defense strategy according to the attack characteristics. Therefore, the security defense strategy is determined according to the attack characteristics of different partition attack behaviors, so that the security defense strategy is more adaptive to the attack behaviors, the protection resources are configured as required according to different attack characteristics, and a better protection effect is achieved.

Description

Technical field [0001] The present invention relates to the field of network security, and in particular, relating to a network security method and system. Background technique [0002] With the expansion and popularity of network technology, the network has become a need for people to learn, education, work, and life, and gradually become a necessity of people's lives, and people's dependence is increasing. The development of network technology has become increasingly highlighted. People's demand for information security is also getting higher and higher, so the development of network security technology has been widely concerned. [0003] Although some of the existing network security technologies can be protected for some attack methods, existing network security cannot be configured to configure protective resources according to the characteristics of the attack means, and there is no better protection. Therefore, safety protection is carried out through existing network secu...

AI Technical Summary

Problems solved by technology

[0003] Although the existing network security technology can be used to protect some attack methods, the existing network security cannot allocate protection resources according to the characteristics of the attack methods as needed, and cannot achieve a good protection effect.

Therefore, there is still the problem of poor network security protection effect through the existing network security technology for security protection.

Images