Distributed dynamic network security protecting system

Abstract

The distributed dynamic network security protecting system has central network administration station provided with summarizing decision module and policy releasing module. The network is divided into N subnetworks in tree structure, and each subnetwork administration station is provided with summarizing decision module and policy releasing module. Each node in the subnetwork has micro invasion detecting module and micro fire wall module installed. In the policy releasing module, mobile agency technology is adopted. The distributed micro invasion detecting module provides security protection in application layer while the distributed micro fire wall module provides security protection in kernel level. The double security protection makes the system capable of preventing outer and inner attack, preventing cooperative invasion and providing dynamic immunity.

Description

technical field [0001] The invention belongs to the field of computer security, in particular to a network dynamic security protection system based on distributed micro-firewall and micro-intrusion detection. Background technique [0002] With the increase of network crimes and the emergence of hacker websites, network security has become a crucial issue in the field of computer and its applications, so network security tools emerge in endlessly. Although people are constantly modifying the network protocols, the relatively mature and already commercialized intrusion detection and firewall technologies among network security tools have attracted much attention. These two technologies are applied security technologies based on modern communication network technology and information security technology, with the goal of protecting data, resources and users' reputation. [0003] The technical report of the China Cyber ​​Security Response Center pointed out that the current int...

AI Technical Summary

Problems solved by technology

This structure eliminates some weaknesses of traditional firewalls (for example: depends on the physical topology of the network, cannot prevent internal attacks, is not efficient, has many failure points, cannot effectively handle many end-to-end encryption protocols such as IPSec)

However, in this structure, with the increase of protected nodes, the task of the central management platform to issue policies will become increasingly heavy, which reduces the scalability of the system; in addition, this structure cannot prevent increasingly severe coordinated intrusions, and cannot effectively Realize dynamic autoimmunity

Images