Computer network emergency response early-warning treatment system

Abstract

This invention relates to computer network emergency responding early warning process system, which is characterized by the following: the system comprises network composed of outer, servo and management network sections and filter and process modules. The normal visitor computer and attacker computer are connected to the router through outer network section, wherein one end of the router is connected to the service network section with eagle network tester and the other end is connected to the management section. The invention establishes the system aimed on the illegal attacking, which is cooperated with safety policy generation system.

Description

Technical field: [0001] The invention relates to the technical field of computer network security, in particular to an early warning processing system for emergency response to illegal intrusion of a computer network. Background technique: [0002] At present, about computer security, the International Committee for Standardization defines it as follows: the technical and management security protection for data processing systems and the protection of computer hardware, software, and data from accidental or malicious reasons. Give way. [0003] With the rapid development of technology, computer and Internet, computer security is being challenged more and more seriously. People are facing a sharp increase in cyber attacks and a serious flood of malicious viruses. Currently, firewalls and antivirus software are still the only cybersecurity measures many networks have in place. It turns out that neither firewalls nor antivirus software play a role in today's cyberattacks (su...

AI Technical Summary

Problems solved by technology

[0005] Since the IDS (Intrusion Detection System Host Intrusion Detector) and / NIDS (Network Intrusion Detection System Network Intrusion Detector) technologies in the current information security technology field are relatively mature, this is a tool designed and configured to ensure the security of computer systems. It is a technology that can detect and report unauthorized or abnormal phenomena in the system in a timely manner. It is a technology used to detect violations of security policies in computer networks: such as violations of illegal intrusion into users; violations of user abuse and other violations of security policies behavior, but the existing response methods can only be limited to local intrusion objects, and lack automatic, network-wide, and effective responses to the real source

Images