一种病毒传播监测方法、装置、设备及存储介质
By combining the monitoring and analysis of the network abnormal behavior monitoring system and the boundary security protection gateway, the problems of accuracy and timeliness of the existing virus transmission monitoring system have been solved, and efficient monitoring and timely alarm of virus transmission have been achieved.
CN116471115BActive Publication Date: 2026-07-17HANGZHOU DBAPPSECURITY CO LTD
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- HANGZHOU DBAPPSECURITY CO LTD
- Filing Date
- 2023-05-10
- Publication Date
- 2026-07-17
AI Technical Summary
Technical Problem
Existing virus transmission monitoring systems are unable to detect large-scale virus transmission in a timely and accurate manner, and non-professionals find it difficult to judge the status of the network system from various alarm information.
Method used
By combining a network anomaly behavior monitoring system with a border security protection gateway, port scanning events and asset infection events in the network environment are monitored, scanning records and infection logs are generated, and alarm models are used for analysis to determine virus propagation events.
Benefits of technology
It improves the accuracy and timeliness of virus transmission monitoring, enhances the correlation between devices, and ensures timely alerts when assets are compromised.
✦ Generated by Eureka AI based on patent content.
Smart Images
Figure CN116471115B_ABST
Abstract
本申请公开了一种病毒传播监测方法、装置、设备及存储介质，涉及网络安全技术领域，包括：利用网络异常行为监测系统监测当前网络环境中端口的资产扫描事件生成扫描记录；若满足预设告警条件，则通过将异常扫描记录和第一告警信息输出至告警模型；利用边界安全防护网关监测当前网络环境中的资产感染事件，若资产感染事件为病毒感染，则生成病毒感染日志，并将对应的第二告警信息输出至告警模型；若告警模型在预设时间范围内接收到第一告警信息、第二告警信息，则判定发生病毒传播事件。通过同时对网络环境中的资产和端口进行扫描，可以在资产受到侵害时及时告警；并且结合告警信息进行分析，提高设备间的关联性，从而提高告警数据的精确性。
Need to check novelty before this filing date? Find Prior Art