Assets safety management method, system and network element equipment of telecom network

Abstract

The method is applicable to telecomm network including at least one device of net element. In the method, device of net element takes charge of tracking safe state of asset for each asset included inadjacent device of net element, and manages safety of asset according to safe state of asset. The invention also discloses the system and device of net element corresponding to the method as well as technique for carrying out safety management for peripheral assets based on individual device.

Description

technical field

[0001] The present invention relates to the field of network security, in particular to an asset (Asset, or Product) security management method, system and network element equipment of a telecommunication network. Background technique

[0002] At present, when asset security management is carried out in the telecommunications network, it is mainly aimed at physical assets, such as: network element equipment, system host, server, security equipment (such as hardware firewall, IDS), etc., and centralized management is carried out through the network management system, while Management methods are basically based on several mechanisms such as status monitoring and host reinforcement (such as installing firewalls and anti-virus software on the host). Although the existing network security management methods can prevent some security risks, and can notify the system to take certain measures after a security incident occurs, the delay is long, and the hazard is lik...

Examples

Embodiment Construction

[0037] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0038] The invention realizes a distributed asset safety management technology based on individual network element equipment, and the network element equipment tracks the security status of each asset in its adjacent network element equipment, and performs security management on each asset according to the security status. Among them, the security management process performed by a network element device on the assets of its adjacent network element devices mainly includes: recording the status of each asset on the adjacent network element device in the network element device; When receiving an access request or information from a meta-device, determine the asset status corresponding to the access request; if the determined asset status is a trusted asset, process the access request or receive the information normally; if the determined a...

technical field

[0001] The present invention relates to the field of network security, in particular to an asset (Asset, or Product) security management method, system and network element equipment of a telecommunication network. Background technique

[0002] At present, when asset security management is carried out in the telecommunications network, it is mainly aimed at physical assets, such as: network element equipment, system host, server, security equipment (such as hardware firewall, IDS), etc., and centralized management is carried out through the network management system, while Management methods are basically based on several mechanisms such as status monitoring and host reinforcement (such as installing firewalls and anti-virus software on the host). Although the existing network security management methods can prevent some security risks, and can notify the system to take certain measures after a security incident occurs, the delay is long, and the hazard is lik...

Examples

Embodiment Construction

[0037] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0038] The invention realizes a distributed asset safety management technology based on individual network element equipment, and the network element equipment tracks the security status of each asset in its adjacent network element equipment, and performs security management on each asset according to the security status. Among them, the security management process performed by a network element device on the assets of its adjacent network element devices mainly includes: recording the status of each asset on the adjacent network element device in the network element device; When receiving an access request or information from a meta-device, determine the asset status corresponding to the access request; if the determined asset status is a trusted asset, process the access request or receive the information normally; if the determined a...

Images