Computer information security monitoring system and use method thereof

Abstract

The invention discloses a computer information security monitoring system and a use method thereof.The computer information security monitoring system comprises a data information acquisition module, the output end of the data information acquisition module is electrically connected with a data information transmission module, and the output end of the data information transmission module is electrically connected with an information storage module; the output end of the information storage module is electrically connected with an information analysis module, the output end of the information analysis module is electrically connected with a data information recording module, the output end of the data information recording module is electrically connected with a controller, and the output end of the controller is electrically connected with a data tamper-proof module. And the output end of the data tamper-proofing module is electrically connected with a data encryption module. According to the information security monitoring system disclosed by the invention, the phenomena that the traditional security is poor and intercepted information cannot be recovered are changed, and the security is improved and data can be recovered by adopting various modules, so that the use quality of the computer information security monitoring system cannot be influenced.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a computer information security monitoring system and a method for using the same. Background Art

[0002] According to the patents published on the China Patent Network, the patent name is: A computer information security monitoring system, and the patent application number is: 201810869594.8. The present invention provides a computer information security monitoring system. The present invention provides a computer information security monitoring system, which uses a computer processor, a computer camera, an image processing module, a computer hard disk, a computer power box, a computer memory, an alarm module and a monitoring module to perform security monitoring on computer information. The image processing module includes a grayscale conversion unit, an image enhancement unit, an image smoothing unit and an image filtering unit. The computer camera, the grayscale conversion unit, the image enhancement unit, the image smoothing unit, the image filtering unit and the computer processor are connected in sequence. The computer information security monitoring system can not only ensure the security of computer information, but also obtain the image information of the person who steals the computer information when the computer security is threatened; however, the above-mentioned computer information security monitoring system has a poor overall security effect, cannot provide multiple protections for the computer information, and cannot restore the intercepted information, which greatly affects the use quality of the computer information security monitoring system.

[0003] Therefore, it is necessary to design and transform the information security monitoring system to effectively prevent the phenomenon of poor overall security. Summary of the invention

[0004] In order to solve the problems raised in the above background technology, the purpose of the present invention is to provide a computer information security monitoring system and its use method, which has the advantages of increasing security and recovering intercepted information, thus solving the problem of poor overall security.

[0005] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: a computer information security monitoring system and a method for using the same, comprising a data information acquisition module, the output end of the data information acquisition module is electrically connected to a data information transmission module, the output end of the data information transmission module is electrically connected to an information storage module, the output end of the information storage module is electrically connected to an information analysis module, the output end of the information analysis module is electrically connected to a data information recording module, the output end of the data information recording module is electrically connected to a controller, the output end of the controller is electrically connected to a data tamper-proof module, the output end of the data tamper-proof module is electrically connected to a data encryption module, the output end of the data tamper-proof module is electrically connected to an encryption transport module, the output end of the encryption transport module is electrically connected to a digital signature module, and the digital signature The output end of the module is electrically connected to a data verification module, the output end of the data verification module is electrically connected to a firewall intrusion detection module, the output end of the firewall intrusion detection module is electrically connected to an alarm and response module, the output end of the alarm and response module is electrically connected to a hazard level classification module, the output end of the hazard level classification module is electrically connected to a red indicator light, a green indicator light and a yellow indicator light, respectively, the red indicator light, the green indicator light and the yellow indicator light are electrically connected to a grading processing module, the output end of the hazard level classification module is electrically connected to a security audit module, the input end of the security audit module is electrically connected to a data operation log module, the output end of the data operation log module is electrically connected to a data information recording module, and the output end of the data operation log module is bidirectionally electrically connected to a data backup and recovery module.

[0006] As a preferred embodiment of the present invention, the input end of the controller is electrically connected to a power module, and the power module is used in conjunction with the controller.

[0007] As a preferred embodiment of the present invention, the data information collection module is composed of a network traffic collection module, a system log collection module and a user behavior collection module.

[0008] As a preferred embodiment of the present invention, the input end of the data anti-tampering module is electrically connected to an anti-theft module, and the anti-theft module is used in conjunction with the data anti-tampering module.

[0009] As a preferred embodiment of the present invention, the input end of the firewall intrusion detection module is electrically connected to a maintenance and repair module, and the maintenance and repair module is used in conjunction with the firewall intrusion detection module.

[0010] As a preferred embodiment of the present invention, the data information transmission module is composed of a transmitter module, a channel module, a receiver module and a transmission control module.

[0011] As a preferred embodiment of the present invention, the data information analysis module consists of a real-time analysis module and an offline analysis module.

[0012] As a preferred method of use of the present invention, the following steps are included:

[0013] S1: First, the network traffic, system logs, user lines and other data are collected through the data information collection module, and then transmitted through the data transmission module. After being transmitted to the information storage module, data storage processing is performed, and then the real-time analysis module and offline analysis module inside the information analysis module are used for analysis and processing, and then the analysis results are recorded through the data information recording module, and then transmitted to the controller. The controller transmits the data to the data tamper-proof module, and the data tamper-proof module encrypts and transmits it through the encryption transmission module, and then the data signature module and the data verification module are used for transmission verification, and then the firewall intrusion detection module is used for virus detection, and then the alarm and response module is used for timely notification and processing, and then the detected viruses are divided into red indicator lights, green indicator lights and yellow indicator lights through the danger level separation module, and then different classification processing is performed through the classification processing module, and then the operation is recorded through the security audit module and the data operation log module, and then the data backup and recovery module is used for recovery processing, so as to achieve the effect of increasing security and recovering intercepted information.

[0014] S2: Then the network traffic collection module, system log collection module and user behavior collection module inside the data information collection module perform multi-directional collection, and then the transmitter module, channel module, receiver module and transmission control module inside the data information transmission module protect the data information transmission, and then the real-time analysis module and offline analysis module inside the data information analysis module perform various analyses, so as to further ensure the security of the data.

[0015] Compared with the prior art, the present invention has the following beneficial effects:

[0016] 1. The information security monitoring system of the present invention changes the traditional phenomenon of poor security and inability to recover intercepted information. It adopts multiple modules to increase security and can recover data, which will not affect the quality of use of the computer information security monitoring system.

[0017] 2. The present invention can provide the controller with more sufficient power through the setting of the power module, thus avoiding power outage.

[0018] 3. The present invention can make data information collection more diverse and improve the quality of collection through the settings of network traffic collection module, system log collection module and user behavior collection module.

[0019] 4. The present invention can make the data inside the data tamper-proof module more secure and avoid the phenomenon of theft by setting the anti-theft module.

[0020] 5. The present invention can maintain and repair damaged data by setting up a maintenance and repair module to avoid data loss.

[0021] 6. The present invention can make data transmission more stable and prevent the phenomenon of data transmission disconnection through the configuration of the transmitter module, the channel module, the receiver module and the transmission control module.

[0022] 7. The present invention enables the data information analysis module to perform analysis more fully and ensures the quality of the analysis through the provision of the real-time analysis module and the offline analysis module. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 It is a structural system diagram of the present invention;

[0024] Figure 2 It is a system diagram of the structural data information acquisition module of the present invention;

[0025] Figure 3 It is a system diagram of the local data information transmission module of the present invention;

[0026] Figure 4 It is a system diagram of the local data information analysis module of the present invention. DETAILED DESCRIPTION

[0027] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0028] like Figures 1 to 4As shown, a computer information security monitoring system and a method of using the same provided by the present invention include a data information acquisition module, an output end of the data information acquisition module is electrically connected to a data information transmission module, an output end of the data information transmission module is electrically connected to an information storage module, an output end of the information storage module is electrically connected to an information analysis module, an output end of the information analysis module is electrically connected to a data information recording module, an output end of the data information recording module is electrically connected to a controller, an output end of the controller is electrically connected to a data tamper-proof module, an output end of the data tamper-proof module is electrically connected to a data encryption module, an output end of the data tamper-proof module is electrically connected to an encryption transmission module, an output end of the encryption transmission module is electrically connected to a digital signature module, and an output end of the digital signature module is electrically connected to a data tamper-proof module. A data validation module is connected, the output end of the data validation module is electrically connected to a firewall intrusion detection module, the output end of the firewall intrusion detection module is electrically connected to an alarm and response module, the output end of the alarm and response module is electrically connected to a hazard level classification module, the output end of the hazard level classification module is electrically connected to a red indicator light, a green indicator light and a yellow indicator light, respectively, the red indicator light, the green indicator light and the yellow indicator light are electrically connected to a grading processing module, the output end of the hazard level classification module is electrically connected to a security audit module, the input end of the security audit module is electrically connected to a data operation log module, the output end of the data operation log module is electrically connected to a data information recording module, and the output end of the data operation log module is bidirectionally electrically connected to a data backup and recovery module.

[0029] refer to Figure 1 The input end of the controller is electrically connected to a power module, and the power module is used in conjunction with the controller.

[0030] As a technical optimization solution of the present invention, by setting a power module, the controller can have more sufficient power and avoid power outages.

[0031] refer to Figure 2 ,The data information collection module is composed of the network traffic collection module, the ,system log collection module and the user behavior collection module.

[0032] As a technical optimization solution of the present invention, by setting up a network traffic collection module, a system log collection module and a user behavior collection module, data information collection can be made more diverse and the quality of collection can be improved.

[0033] refer to Figure 1 The input end of the data anti-tampering module is electrically connected to the anti-theft module, and the anti-theft module is used in conjunction with the data anti-tampering module.

[0034] As a technical optimization solution of the present invention, by setting up the anti-theft module, the data inside the data tamper-proof module can be made more secure and prevented from being stolen.

[0035] refer to Figure 1 The input end of the firewall intrusion detection module is electrically connected to a maintenance and repair module, and the maintenance and repair module is used in conjunction with the firewall intrusion detection module.

[0036] As a technical optimization solution of the present invention, by setting up a maintenance and repair module, damaged data can be maintained and repaired to avoid data loss.

[0037] refer to Figure 3 ,The data information transmission module is composed of a transmitter module, a channel module, a receiver module and a transmission control module.

[0038] As a technical optimization solution of the present invention, by setting up a transmitter module, a channel module, a receiver module and a transmission control module, data transmission can be made more stable and the phenomenon of data transmission disconnection can be prevented.

[0039] refer to Figure 4 ,The data information analysis module consists of real-time analysis module and offline analysis module.

[0040] As a technical optimization solution of the present invention, by setting up a real-time analysis module and an offline analysis module, the data information analysis module can perform analysis more fully, thereby ensuring the quality of the analysis.

[0041] S1: First, the network traffic, system logs, user lines and other data are collected through the data information collection module, and then transmitted through the data transmission module. After being transmitted to the information storage module, data storage processing is performed, and then the real-time analysis module and offline analysis module inside the information analysis module are used for analysis and processing, and then the analysis results are recorded through the data information recording module, and then transmitted to the controller. The controller transmits the data to the data tamper-proof module, and the data tamper-proof module encrypts and transmits it through the encryption transmission module, and then the data signature module and the data verification module are used for transmission verification, and then the firewall intrusion detection module is used for virus detection, and then the alarm and response module is used for timely notification and processing, and then the detected viruses are divided into red indicator lights, green indicator lights and yellow indicator lights through the danger level separation module, and then different classification processing is performed through the classification processing module, and then the operation is recorded through the security audit module and the data operation log module, and then the data backup and recovery module is used for recovery processing, so as to achieve the effect of increasing security and recovering intercepted information.

[0042] S2: Then the network traffic collection module, system log collection module and user behavior collection module inside the data information collection module perform multi-directional collection, and then the transmitter module, channel module, receiver module and transmission control module inside the data information transmission module protect the data information transmission, and then the real-time analysis module and offline analysis module inside the data information analysis module perform various analyses, so as to further ensure the security of the data.

[0043] The working principle and use process of the present invention are as follows: first, the network flow, system log, user line and other data are collected through the data information collection module, and then transmitted through the data transmission module. After being transmitted to the information storage module, data storage processing is performed, and then the real-time analysis module and offline analysis module inside the information analysis module are used for analysis and processing, and then the analysis results are recorded through the data information recording module and then passed to the controller. The controller passes the data to the data tamper-proof module, and the data tamper-proof module encrypts and transmits it through the encryption transmission module, and then the data signature module and the data verification module are used for transmission verification, and then the firewall intrusion detection module is used for virus detection, and then the alarm and response module is used for timely notification and processing, and then the danger level is separated. The module divides the detected viruses into red indicator lights, green indicator lights and yellow indicator lights, and then performs different graded processing through the graded processing module, and then records the operations through the security audit module and the data operation log module, and then performs recovery processing through the data backup and recovery module, so as to achieve the effect of increasing security and recovering intercepted information, and then the network traffic collection module, system log collection module and user behavior collection module inside the data information collection module perform multi-faceted collection, and then the transmitter module, channel module, receiver module and transmission control module inside the data information transmission module protect the data information transmission, and then the real-time analysis module and offline analysis module inside the data information analysis module perform various analyses, so as to further ensure the security of the data.

[0044] To sum up: the computer information security monitoring system and its use method have changed the traditional phenomenon of poor security and inability to recover intercepted information through the information security monitoring system. It adopts multiple modules to increase security and can recover data, which will not affect the quality of use of the computer information security monitoring system.

[0045] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0046] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A computer information security monitoring system, comprising a data information acquisition module, characterized in that: The output end of the data information acquisition module is electrically connected to the data information transmission module, the output end of the data information transmission module is electrically connected to the information storage module, the output end of the information storage module is electrically connected to the information analysis module, the output end of the information analysis module is electrically connected to the data information recording module, the output end of the data information recording module is electrically connected to the controller, the output end of the controller is electrically connected to the data tamper-proof module, the output end of the data tamper-proof module is electrically connected to the data encryption module, the output end of the data tamper-proof module is electrically connected to the encryption transmission module, the output end of the encryption transmission module is electrically connected to the digital signature module, the output end of the digital signature module is electrically connected to the data verification module, the data verification module The output end is electrically connected to a firewall intrusion detection module, the output end of the firewall intrusion detection module is electrically connected to an alarm and response module, the output end of the alarm and response module is electrically connected to a hazard level classification module, the output end of the hazard level classification module is electrically connected to a red indicator light, a green indicator light and a yellow indicator light, respectively, the red indicator light, the green indicator light and the yellow indicator light are electrically connected to a grading processing module, the output end of the hazard level classification module is electrically connected to a security audit module, the input end of the security audit module is electrically connected to a data operation log module, the output end of the data operation log module is electrically connected to a data information recording module, and the output end of the data operation log module is bidirectionally electrically connected to a data backup and recovery module.

2. A computer information security monitoring system according to claim 1, characterized in that: The input end of the controller is electrically connected to a power module, and the power module is used in conjunction with the controller.

3. A computer information security monitoring system according to claim 1, characterized in that: The data information collection module is composed of a network traffic collection module, a system log collection module and a user behavior collection module.

4. A computer information security monitoring system according to claim 1, characterized in that: The input end of the data anti-tampering module is electrically connected to an anti-theft module, and the anti-theft module is used in conjunction with the data anti-tampering module.

5. A computer information security monitoring system according to claim 1, characterized in that: The input end of the firewall intrusion detection module is electrically connected to a maintenance and repair module, and the maintenance and repair module is used in conjunction with the firewall intrusion detection module.

6. A computer information security monitoring system according to claim 1, characterized in that: The data information transmission module is composed of a transmitter module, a channel module, a receiver module and a transmission control module.

7. A computer information security monitoring system according to claim 1, characterized in that: The data information analysis module consists of a real-time analysis module and an offline analysis module.

8. A method for using a computer information security monitoring system according to any one of the above claims, characterized in that: The following steps are involved: S1: First, the network traffic, system logs, user lines and other data are collected through the data information collection module, and then transmitted through the data transmission module. After being transmitted to the information storage module, data storage processing is performed, and then the real-time analysis module and offline analysis module inside the information analysis module are used for analysis and processing, and then the analysis results are recorded through the data information recording module, and then transmitted to the controller. The controller transmits the data to the data tamper-proof module, and the data tamper-proof module encrypts and transmits it through the encryption transmission module, and then the data signature module and the data verification module are used for transmission verification, and then the firewall intrusion detection module is used for virus detection, and then the alarm and response module is used for timely notification and processing, and then the detected viruses are divided into red indicator lights, green indicator lights and yellow indicator lights through the danger level separation module, and then different classification processing is performed through the classification processing module, and then the operation is recorded through the security audit module and the data operation log module, and then the data backup and recovery module is used for recovery processing, so as to achieve the effect of increasing security and recovering intercepted information. S2: Then the network traffic collection module, system log collection module and user behavior collection module inside the data information collection module perform multi-directional collection, and then the transmitter module, channel module, receiver module and transmission control module inside the data information transmission module protect the data information transmission, and then the real-time analysis module and offline analysis module inside the data information analysis module perform various analyses, so as to further ensure the security of the data.

Images