Communication network security risk prediction system and prediction method

Abstract

The invention discloses a communication network security risk prediction system and prediction method, and relates to the technical field of communication network security risk prediction systems, and the technical scheme is that the system comprises a security management center module, and the security management center module comprises a communication network security management module, a network risk management module and a network calculation risk management module. The communication network security management module comprises a network structure security module, a communication integrity and secrecy module, a network trust access module, a network security audit module and a network equipment protection module, and the network risk management module comprises an access control module, an intrusion prevention module and a risk vulnerability protection module. The network computing risk management module comprises an access risk alarm module, a communication network isolation module and a communication network physical isolation module, and has the beneficial effects that the vulnerability risk on the communication network is actively and continuously monitored, the risk is effectively prevented, and the data leakage risk is reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of communication network security risk prediction systems, and in particular to a communication network security risk prediction system and a prediction method. Background Art

[0002] Communication is the exchange and transmission of information between people through some kind of media. A network is a data link that connects isolated workstations or hosts together with physical links. A communication network is a link that physically connects isolated devices to achieve information exchange between people, people and computers, and computers and computers, thereby achieving the purpose of resource sharing and communication.

[0003] The existing communication networks have no vulnerability scanning and protection rules, lack intrusion detection methods, and are difficult to monitor and manage risks. There are hidden dangers of risks being exploited, great security pressure, and no effective prevention. Summary of the invention

[0004] To this end, the present invention provides a communication network security risk prediction system and prediction method to solve the problems that the communication network has no vulnerability scanning and protection rules, lacks intrusion detection means for the communication network, risks are difficult to monitor and manage, there are hidden dangers of risks being exploited, security pressure is high, and effective prevention cannot be made.

[0005] In order to achieve the above-mentioned objectives, the present invention provides the following technical solutions: a communication network security risk prediction system and prediction method, including a security management center module, the security management center module includes a communication network security management module, a network risk management module and a network computing risk management module, the communication network security management module includes a network structure security module, a communication integrity and confidentiality module, a network trusted access module, a network security audit module and a network equipment protection module, the network risk management module includes an access control module, an intrusion prevention module and a risk vulnerability protection module, and the network computing risk management module includes an access risk alarm module, a communication network isolation module and a communication network physical isolation module.

[0006] Preferably, the connection ends of the security management center module are respectively provided with a communication log analysis module and a network operation and maintenance analysis module, and the security management center module is respectively data-connected with the communication log analysis module and the network operation and maintenance analysis module.

[0007] Preferably, the network computing risk management module includes an antivirus module, a host and container protection module, a data backup and recovery module, a risk preprocessing module, a virus detection and killing module, a database management module, a source tracing analysis module and a traffic protection module.

[0008] Preferably, the security management center module is data-connected with the communication network security management module, the network risk management module and the network computing risk management module respectively; the communication network security management module is data-connected with the network structure security module, the communication integrity and confidentiality module, the network trusted access module, the network security audit module and the network equipment protection module respectively; the network risk management module is data-connected with the access control module, the intrusion prevention module and the risk vulnerability protection module respectively; the network computing risk management module is data-connected with the access risk alarm module, the communication network isolation module and the communication network physical isolation module respectively.

[0009] Preferably, the network computing risk management module is respectively connected to the antivirus module, the host and container protection module, the data backup and recovery module, the risk preprocessing module, the virus detection and killing module, the database management module, the source tracing analysis module and the traffic protection module.

[0010] Preferably, the network computing risk management module includes a main chassis body, the four bottom corners of the main chassis body are fixedly connected to support columns, and a connecting mechanism is provided on one side of the main chassis body; the connecting mechanism includes a connecting seat and an adapter, the connecting seat is fixedly connected to the main chassis body, a plurality of line connectors are plugged into one side of the adapter, the adapter extends into the interior of the connecting seat, a limiting assembly is provided on one side of the connecting seat, and snap-on assemblies are provided on both sides of the adapter.

[0011] Preferably, the limit assembly includes an electric push rod, which is fixedly connected to the inner wall of the main box body, and the output end of the electric push rod is fixedly connected to a fixing plate, and two tooth plates are fixedly provided at the bottom of the fixing plate, and sliding grooves are provided on both sides of the connecting seat, and the tooth plates slide inside the sliding grooves, and gears are provided on one side of the two tooth plates, and the tooth plates are meshed with the gears, and a rotating rod is fixedly provided on one side of the two gears, and the rotating rod passes through the connecting seat and is connected to the connecting seat through a bearing, and one end of the two rotating rods is fixedly connected to a block.

[0012] Preferably, the clamping assembly includes a side groove, which is opened on one side of the adapter, a clamping plate is provided inside the side groove, the clamping plate slides inside the side groove, a circular groove is opened inside the clamping plate, a connecting rod is fixed inside the side groove, one end of the connecting rod extends into the circular groove, a second spring is sleeved on the outside of the connecting rod, and the clamping plate is engaged with the clamping block.

[0013] Preferably, two inner grooves are provided inside the adapter, push rods are provided inside the two inner grooves, a first spring is provided inside the two inner grooves, one end of the first spring is fixedly connected to the inner wall of the inner groove, and the other end of the first spring is fixedly connected to the push rod.

[0014] A communication network security risk prediction method, the specific steps are as follows:

[0015] S1. The network structure security module is used to reasonably divide network segments and VLANs to ensure the security of the network structure. The communication integrity and confidentiality module ensures the consistency of information content in sending, receiving and saving. In the event of information tampering attacks, an effective detection and discovery mechanism is provided to achieve communication integrity. Encryption measures are used to ensure data confidentiality. The network trust access module prohibits illegal clients from entering the network, monitors the network, and blocks network access to external machines without legal authentication, protecting the established security environment. The network behavior is audited through the network security audit module, and network equipment and security equipment are protected through the network equipment protection module to ensure the security of the communication network.

[0016] S2. Access control is performed through the access control module to control data information entering and leaving the security area boundary, preventing unauthorized and unauthorized access. The intrusion prevention module actively blocks various attacks on the information system, realizes security protection of the network layer and business system, and protects core information assets from attacks. The risk vulnerability protection module uses network virtual patches to effectively protect vulnerabilities and prevent cloud assets from being invaded. The communication log analysis module collects information recorded by the communication network system, equipment, software, etc. under certain circumstances. The network operation and maintenance analysis module uses various technical means to monitor and record the operation behavior of operation and maintenance personnel on servers, network equipment, security equipment, databases and other equipment in the network;

[0017] S3. Deploy malicious code prevention software through the antivirus module for defense. Use Web access control technology through the host and container protection module to effectively resist network layer attacks. The data backup and recovery module establishes a data backup mechanism. The risk preprocessing module arranges some hosts, network services or information as bait to induce the attacker to attack them, so as to capture and analyze the attack behavior. Enhance the security protection capability of the actual system through technical and management means. The virus detection module detects and kills viruses through antivirus applications. The database management module supervises database access behavior and issues real-time alarms for risky behaviors of database operations. The source tracing analysis module determines the authenticity of the alarm and its complete attack process. The traffic protection module controls the daily large-scale east-west traffic of the host. The access risk alarm module monitors abnormal access behavior in real time and issues alarms in the first time in the form of emails, text messages, system messages, red traffic lines, etc. The communication network isolation module can isolate the compromised host network with one click to prevent the threat from continuing to spread. The communication network physical isolation module physically cuts off the host communication network to improve data security.

[0018] The embodiments of the present invention have the following advantages:

[0019] 1. Scan and protect communication network vulnerabilities, detect communication network intrusions, accurately identify risks on the communication network, actively and continuously monitor vulnerability risks, account risks, and configuration risks on the communication network, effectively prevent risks, and reduce data leakage risks;

[0020] 2. The fixed plate is controlled to move downward by the electric push rod, the fixed plate drives the toothed plate to move downward, the toothed plate drives the gear to rotate, the gear drives the rotating rod to rotate, the rotating rod drives the card block to rotate, so that the card block no longer limits the card plate, the compressed first spring rebounds and pushes the push rod out, the push rod pushes the adapter out of the connecting seat, completes the physical disconnection of the communication network, protects the security of the server chassis and the communication private network, eliminates the trouble of plugging and unplugging the network cable, greatly improves work efficiency, has a simple structure and is easy to operate. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the implementation methods of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the implementation methods or the description of the prior art. Obviously, the drawings in the following description are only exemplary, and for ordinary technicians in this field, other implementation drawings can be derived from the provided drawings without creative work.

[0022] The structures, proportions, sizes, etc. illustrated in this specification are only used to match the contents disclosed in the specification so as to facilitate understanding and reading by persons familiar with the technology. They are not used to limit the conditions under which the present invention can be implemented, and therefore have no substantial technical significance. Any structural modification, change in proportion or adjustment of size shall still fall within the scope of the technical contents disclosed in the present invention without affecting the effects and purposes that can be achieved by the present invention.

[0023] Figure 1 A schematic diagram of the overall system structure provided by the present invention;

[0024] Figure 2 A schematic diagram of the network computing risk management module system structure provided by the present invention;

[0025] Figure 3 A diagram of the main chassis provided by the present invention;

[0026] Figure 4 A three-dimensional diagram of the connection mechanism provided by the present invention;

[0027] Figure 5 The adapter and the connecting seat provided by the present invention are three-dimensional Figure 1 ;

[0028] Figure 6 The adapter and the connecting seat provided by the present invention are three-dimensional Figure 2 ;

[0029] Figure 7 A cross-sectional view of the adapter provided by the present invention.

[0030] In the figure: 1. Security management center module; 2. Communication network security management module; 3. Network risk management module; 4. Network computing risk management module; 5. Network structure security module; 6. Communication integrity and confidentiality module; 7. Network trust access module; 8. Network security audit module; 9. Network equipment protection module; 10. Access control module; 11. Intrusion prevention module; 12. Risk vulnerability protection module; 13. Access risk warning module; 14. Communication network isolation module; 15. Communication network physical isolation module; 16. Communication log analysis module; 17. Network operation and maintenance analysis module; 18. Antivirus module; 19 , host and container protection module; 20, data backup and recovery module; 21, risk preprocessing module; 22, virus detection module; 23, database management module; 24, traceability analysis module; 25, flow protection module; 26, main chassis body; 27, support column; 28, connecting seat; 29, adapter; 30, line connector; 31, electric push rod; 32, fixed plate; 33, rotating rod; 34, block; 35, card plate; 36, gear; 37, tooth plate; 38, slide groove; 39, inner groove; 40, first spring; 41, push rod; 42, side groove; 43, circular groove; 44, connecting rod; 45, second spring. DETAILED DESCRIPTION

[0031] The following is a description of the implementation of the present invention by specific embodiments. People familiar with the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0032] See attached Figure 1 -Attached Figure 7The present invention provides a communication network security risk prediction system, including a security management center module 1, the security management center module 1 includes a communication network security management module 2, a network risk management module 3 and a network computing risk management module 4, the communication network security management module 2 includes a network structure security module 5, a communication integrity and confidentiality module 6, a network trust access module 7, a network security audit module 8 and a network equipment protection module 9, the network risk management module 3 includes an access control module 10, an intrusion prevention module 11 and a risk vulnerability protection module 12, the network computing risk management module 4 includes an access risk alarm module 13, a communication network isolation module 14 and a communication network physical Isolation module 15, the security management center module 1 is respectively connected to the communication network security management module 2, the network risk management module 3 and the network computing risk management module 4, the communication network security management module 2 is respectively connected to the network structure security module 5, the communication integrity and confidentiality module 6, the network trust access module 7, the network security audit module 8 and the network equipment protection module 9, the network risk management module 3 is respectively connected to the access control module 10, the intrusion prevention module 11 and the risk vulnerability protection module 12, the network computing risk management module 4 is respectively connected to the access risk warning module 13, the communication network isolation module 14 and the communication network physical isolation module 15;

[0033] In this implementation scheme, the communication network security management module 2 mainly includes aspects such as network structure security, network security audit, network equipment protection, communication integrity and confidentiality. The network structure security module 5 has a certain redundancy, which can meet the data exchange needs during business peak periods and reasonably divide network segments and VLANs. The communication integrity and confidentiality module 6 ensures the consistency of information content in sending, receiving and saving during information transmission and storage, and provides an effective detection and discovery mechanism in the event of information tampering attacks to achieve communication integrity and use encryption measures to ensure data confidentiality. The network trust access module 7 prohibits illegal clients from entering and can monitor the network. For external machines without legal authentication, it can block their network access and protect the established security environment. The network security audit module 8 audits network behavior. The network equipment protection module 9 protects network equipment and security equipment. The access control module 10 performs access control, controls data information entering and leaving the security area boundary, and prevents unauthorized and unauthorized access. The intrusion prevention module 11 actively blocks various attacks on the information system, realizes security protection of the network layer and business system, and protects core information assets from attacks. The risk vulnerability protection module 12 uses network virtual patches to effectively protect against vulnerabilities and prevent cloud assets from being invaded. The access risk warning module 13 monitors abnormal access behavior in real time and issues warnings in the form of emails, text messages, system messages, red traffic lines, etc. The communication network isolation module 14 can isolate the compromised host network with one click to prevent the threat from continuing to spread. The communication network physical isolation module 15 physically cuts off the host communication network to improve data security.

[0034] Among them, in order to achieve the purpose of data analysis, this device adopts the following technical solutions: the connection end of the security management center module 1 is respectively provided with a communication log analysis module 16 and a network operation and maintenance analysis module 17, and the security management center module 1 is respectively connected with the communication log analysis module 16 and the network operation and maintenance analysis module 17. The log of the communication log analysis module 16 is the information recorded by the computer communication network system, equipment, software, etc. under certain circumstances. The firewall will record the messages passed and rejected by the ACL. The disk storage system generates log information when a failure occurs or when some systems believe that a failure will occur. There is a lot of information in the log, which tells you why the log needs to be generated and what has happened in the communication network system. Through the log, the operation and maintenance management personnel can understand the system's operating status, security status, and even the operating status. The network operation and maintenance analysis module 17 protects the network and data from invasion and destruction from external and internal users, and uses various technical means to monitor and record the operation behavior of the operation and maintenance personnel on the server, network equipment, security equipment, database and other equipment in the network, so as to centrally alarm, handle in time and audit and determine responsibilities;

[0035] Among them, in order to achieve the purpose of risk management, the present device is implemented by the following technical solutions: the network computing risk management module 4 includes an antivirus module 18, a host and container protection module 19, a data backup and recovery module 20, a risk preprocessing module 21, a virus detection module 22, a database management module 23, a source tracing analysis module 24 and a traffic protection module 25. The network computing risk management module 4 is respectively connected to the antivirus module 18, the host and container protection module 19, the data backup and recovery module 20, the risk preprocessing module 21, the virus detection module 22, the database management module 23, the source tracing analysis module 24 and the traffic protection module 25. The antivirus module 18 deploys malicious code prevention software for defense. The host and container protection module 19 provides effective protection for the core resources of the operating system, such as the registry, network connection, system files, processes, etc. At the same time, the use of Web access control technology can effectively resist network layer attacks. The data backup and recovery module 20 establishes a data backup mechanism. For the key equipment and lines of the network, redundant configuration is required to back up and restore the data respectively. The risk preprocessing module 21 is configured by deployment. Some hosts, network services or information are set as bait to induce the attacker to attack them, so that the attack behavior can be captured and analyzed, the tools and methods used by the attacker can be understood, and the attack intention and motivation can be inferred, so that the defender can clearly understand the security threats they face, and enhance the security protection capabilities of the actual system through technical and management means. The virus detection module 22 detects and kills viruses through antivirus applications. The database management module 23 supervises database access behavior and records all database access and operation behaviors based on SQL syntax and semantic parsing technology to provide a basis for the accountability of the incident after a database security incident occurs; real-time alarms are issued for risky behaviors of database operations. The source tracing analysis module 24 obtains the occurrence of threats based on alarms triggered by other security devices. The alarms triggered by other security devices need to be combined with the fine-grained data of the host. After the process of research and tracing, the authenticity of the alarm and its complete attack process are judged. The traffic protection module 25 provides more humane and diversified means for daily large-scale host east-west traffic control, port control, access relationship control, threat isolation control, etc.

[0036] Among them, in order to achieve the purpose of installation, the present device is implemented by the following technical solutions: the network computing risk management module 4 includes a main box body 26, and the four corners of the bottom of the main box body 26 are fixedly connected with support columns 27, and a connecting mechanism is provided on one side of the main box body 26; the connecting mechanism includes a connecting seat 28 and an adapter 29, and the connecting seat 28 is fixedly connected to the main box body 26, and a plurality of line connectors 30 are plugged into one side of the adapter 29, and the adapter 29 extends into the interior of the connecting seat 28, and a limiting component is provided on one side of the connecting seat 28, and a clamping component is provided on both sides of the adapter 29, and the line connector 30 is drawn into the interior of the adapter 29, and then the adapter 29 is inserted into the interior of the connecting seat 28, and the support column 27 has the function of supporting the main box body 26;

[0037] Among them, in order to achieve the purpose of installation and fixation, the present device is implemented by the following technical solutions: the limit assembly includes an electric push rod 31, the electric push rod 31 is fixedly connected to the inner wall of the main box body 26, the output end of the electric push rod 31 is fixedly connected to a fixing plate 32, two tooth plates 37 are fixedly provided at the bottom of the fixing plate 32, both sides of the connecting seat 28 are provided with sliding grooves 38, the tooth plates 37 slide inside the sliding grooves 38, one side of the two tooth plates 37 is provided with a gear 36, the tooth plates 37 are meshed with the gear 36, one side of the two gears 36 is fixedly provided with a rotating rod 33, the rotating rod 33 passes through the connecting seat 28 and is connected to the connecting seat 28 through a bearing, one end of the two rotating rods 33 is fixedly connected with a clamping block 34, the clamping assembly includes a side groove 42, the side groove 42 is opened on one side of the adapter 29, the side groove A card plate 35 is provided inside 42, and the card plate 35 slides inside the side groove 42. A circular groove 43 is opened inside the card plate 35. A connecting rod 44 is fixed inside the side groove 42. One end of the connecting rod 44 extends into the circular groove 43. A second spring 45 is sleeved outside the connecting rod 44. The card plate 35 is engaged with the card block 34. The adapter 29 is inserted into the connection seat 28. The card block 34 is engaged with the card plate 35, so that the adapter 29 is limited and fixed. When the communication network of the host is about to be invaded, in order to avoid data leakage, a physical isolation method is adopted. By starting the electric push rod 31, the electric push rod 31 controls the fixed plate 32 to move down, and the fixed plate 32 drives the tooth plate 37 to move down. The tooth plate 37 drives the gear 36 to rotate, and the gear 36 drives the rotating rod 33 to rotate. The rotating rod 33 drives the card block 34 to rotate, so that the card block 34 no longer limits the card plate 35.

[0038] Among them, in order to achieve the purpose of disconnection, the present device adopts the following technical solution: two inner grooves 39 are opened inside the adapter 29, push rods 41 are arranged inside the two inner grooves 39, and first springs 40 are arranged inside the two inner grooves 39. One end of the first spring 40 is fixedly connected to the inner wall of the inner groove 39, and the other end of the first spring 40 is fixedly connected to the push rod 41. The compressed first spring 40 rebounds and pushes the push rod 41 out, and the adapter 29 is pushed out of the connecting seat 28 by the push rod 41, thereby completing the physical disconnection of the communication network and protecting the security of the server chassis and the communication private network.

[0039] A communication network security risk prediction method, the specific steps are as follows:

[0040] S1. The network structure security module 5 is used to reasonably divide the network segments and VLANs to ensure the security of the network structure. The communication integrity and confidentiality module 6 ensures the consistency of information content in sending, receiving and saving. In the case of information tampering attacks, an effective detection and discovery mechanism is provided to achieve the integrity of communication. Encryption measures are used to ensure the confidentiality of data. The network trust access module 7 prohibits illegal clients from entering the network, monitors the network, and blocks network access to external machines without legal authentication, protecting the established security environment. The network behavior is audited by the network security audit module 8. The network equipment and security equipment are protected by the network equipment protection module 9 to ensure the security of the communication network.

[0041] S2. Access control is performed through the access control module 10 to control the data information entering and leaving the security area boundary, preventing unauthorized and unauthorized access. The intrusion prevention module 11 is used to actively block various attacks on the information system, realize security protection of the network layer and business system, and protect core information assets from attacks. The risk vulnerability protection module 12 uses network virtual patches to effectively protect vulnerabilities and prevent cloud assets from being invaded. The communication log analysis module 16 collects information recorded by the communication network system, equipment, software, etc. under certain circumstances. The network operation and maintenance analysis module 17 uses various technical means to monitor and record the operation behavior of the operation and maintenance personnel on the servers, network equipment, security equipment, databases and other equipment in the network;

[0042] S3. Anti-virus module 18 deploys malicious code prevention software for defense. Host and container protection module 19 adopts Web access control technology to effectively resist network layer attacks. Data backup and recovery module 20 establishes data backup mechanism. Risk pre-processing module 21 arranges some hosts, network services or information as bait to induce attackers to attack them, so as to capture and analyze attack behaviors. The security protection capability of the actual system is enhanced through technical and management means. Virus detection module 22 detects and kills viruses through anti-virus applications. Database management module 23 supervises database access behavior and issues real-time alarms for risky behaviors of database operations. Source tracing analysis module 24 determines the authenticity of alarms and their complete attack process. Traffic protection module 25 controls daily large-scale host east-west traffic. Access risk alarm module 13 monitors abnormal access behavior in real time and issues alarms in the form of emails, text messages, system messages, red traffic lines, etc. The communication network isolation module 14 can isolate the compromised host network with one click to prevent the threat from continuing to spread. Communication network physical isolation module 15 physically cuts off the host communication network to improve data security.

[0043] The use process of the present invention is as follows: when using the present invention, the line connector 30 is inserted into the adapter 29, and then the adapter 29 is inserted into the connection seat 28, the push rod 41 is retracted into the inner groove 39, the first spring 40 is compressed, and the card block 34 is engaged with the card plate 35 at the same time, so that the adapter 29 is limited and fixed. When the communication network of the host is about to be invaded, in order to avoid data leakage, a physical isolation method is adopted, by starting the electric push rod 31, the electric push rod 31 controls the fixed plate 32 to move down, the fixed plate 32 drives the tooth plate 37 to move down, the tooth plate 37 drives the gear 36 to rotate, the gear 36 drives the rotating rod 33 to rotate, and the rotating rod 33 drives the card block 34 to rotate, so that the card block 34 no longer limits the card plate 35, the compressed first spring 40 rebounds and pushes the push rod 41 out, and the adapter 29 is pushed out of the connection seat 28 by the push rod 41, completing the physical disconnection of the communication network, protecting the security of the server chassis and the communication private network, eliminating the trouble of plugging and unplugging the network cable, greatly improving the work efficiency, simple structure, and convenient operation.

[0044] The above is only a preferred embodiment of the present invention. Any person skilled in the art may modify the present invention by using the above technical solution or modify it into an equivalent technical solution. Therefore, any simple modification or equivalent replacement made according to the technical solution of the present invention shall fall within the scope of protection claimed by the present invention.

Claims

1. A communication network security risk prediction system, comprising a security management center module (1), characterized in that: The security management center module (1) comprises a communication network security management module (2), a network risk management module (3) and a network computing risk management module (4); the communication network security management module (2) comprises a network structure security module (5), a communication integrity and confidentiality module (6), a network trust access module (7), a network security audit module (8) and a network equipment protection module (9); the network risk management module (3) comprises an access control module (10), an intrusion prevention module (11) and a risk vulnerability protection module (12); and the network computing risk management module (4) comprises an access risk warning module (13), a communication network isolation module (14) and a communication network physical isolation module (15).

2. A communication network security risk prediction system according to claim 1, characterized in that: The connection ends of the security management center module (1) are respectively provided with a communication log analysis module (16) and a network operation and maintenance analysis module (17), and the security management center module (1) is respectively data-connected with the communication log analysis module (16) and the network operation and maintenance analysis module (17).

3. A communication network security risk prediction system according to claim 1, characterized in that: The network computing risk management module (4) comprises an anti-virus module (18), a host and container protection module (19), a data backup and recovery module (20), a risk pre-processing module (21), a virus detection and killing module (22), a database management module (23), a source tracing analysis module (24) and a traffic protection module (25).

4. A communication network security risk prediction system according to claim 1, characterized in that: The security management center module (1) is respectively connected to the communication network security management module (2), the network risk management module (3) and the network computing risk management module (4); the communication network security management module (2) is respectively connected to the network structure security module (5), the communication integrity and confidentiality module (6), the network trust access module (7), the network security audit module (8) and the network equipment protection module (9); the network risk management module (3) is respectively connected to the access control module (10), the intrusion prevention module (11) and the risk vulnerability protection module (12); the network computing risk management module (4) is respectively connected to the access risk warning module (13), the communication network isolation module (14) and the communication network physical isolation module (15).

5. A communication network security risk prediction system according to claim 3, characterized in that: The network computing risk management module (4) is respectively connected to the anti-virus module (18), the host and container protection module (19), the data backup and recovery module (20), the risk pre-processing module (21), the virus detection module (22), the database management module (23), the source tracing analysis module (24) and the traffic protection module (25).

6. A communication network security risk prediction system according to claim 1, characterized in that: The network computing risk management module (4) comprises a main chassis body (26), the four corners of the bottom of the main chassis body (26) are fixedly connected to support columns (27), and a connecting mechanism is provided on one side of the main chassis body (26); the connecting mechanism comprises a connecting seat (28) and an adapter (29), the connecting seat (28) is fixedly connected to the main chassis body (26), a plurality of line connectors (30) are plugged on one side of the adapter (29), the adapter (29) extends into the interior of the connecting seat (28), a limiting component is provided on one side of the connecting seat (28), and clamping components are provided on both sides of the adapter (29).

7. A communication network security risk prediction system according to claim 6, characterized in that: The limit assembly comprises an electric push rod (31), the electric push rod (31) is fixedly connected to the inner wall of the main box body (26), the output end of the electric push rod (31) is fixedly connected to a fixed plate (32), the bottom of the fixed plate (32) is fixedly provided with two tooth plates (37), both sides of the connecting seat (28) are provided with sliding grooves (38), the tooth plates (37) slide inside the sliding grooves (38), one side of the two tooth plates (37) is provided with a gear (36), the tooth plates (37) are meshed with the gear (36), one side of the two gears (36) is fixedly provided with a rotating rod (33), the rotating rod (33) passes through the connecting seat (28) and is connected to the connecting seat (28) through a bearing, and one end of the two rotating rods (33) is fixedly connected with a clamping block (34).

8. A communication network security risk prediction system according to claim 7, characterized in that: The clamping assembly comprises a side groove (42), the side groove (42) is opened on one side of the adapter (29), a clamping plate (35) is arranged inside the side groove (42), the clamping plate (35) slides inside the side groove (42), a circular groove (43) is opened inside the clamping plate (35), a connecting rod (44) is fixedly arranged inside the side groove (42), one end of the connecting rod (44) extends into the circular groove (43), a second spring (45) is sleeved outside the connecting rod (44), and the clamping plate (35) is buckled with the clamping block (34).

9. A communication network security risk prediction system according to claim 6, characterized in that: Two inner grooves (39) are provided inside the adapter (29), push rods (41) are provided inside the two inner grooves (39), and first springs (40) are provided inside the two inner grooves (39), one end of the first spring (40) is fixedly connected to the inner wall of the inner groove (39), and the other end of the first spring (40) is fixedly connected to the push rod (41).

10. A communication network security risk prediction method, based on a communication network security risk prediction system according to any one of claims 1 to 9, characterized in that: The specific steps are as follows: S1. The network structure security module (5) is used to reasonably divide network segments and VLANs to ensure the security of the network structure. The communication integrity and confidentiality module (6) is used to ensure the consistency of information content in sending, receiving and saving. In the event of information tampering attacks, an effective detection and discovery mechanism is provided to achieve communication integrity. Encryption measures are used to ensure data confidentiality. The network trust access module (7) is used to prohibit illegal clients from entering the network and monitor the network. For external machines without legal authentication, their network access can be blocked to protect the established security environment. The network behavior is audited through the network security audit module (8). The network equipment and security equipment are protected through the network equipment protection module (9) to ensure the security of the communication network. S2. Access control is performed through the access control module (10), and data information entering and leaving the security area boundary is controlled to prevent unauthorized and unauthorized access. The intrusion prevention module (11) is used to actively block various attacks on the information system, realize security protection of the network layer and business system, and protect core information assets from attacks. The risk vulnerability protection module (12) uses network virtual patches to effectively protect vulnerabilities and prevent cloud assets from being invaded. The communication log analysis module (16) collects information recorded by the communication network system, equipment, software, etc. under certain circumstances. The network operation and maintenance analysis module (17) uses various technical means to monitor and record the operation behavior of the operation and maintenance personnel on the server, network equipment, security equipment, database and other equipment in the network; S3, through the anti-virus module (18), malicious code prevention software is deployed for defense. Through the host and container protection module (19), Web access control technology can be used to effectively resist network layer attacks. The data backup and recovery module (20) establishes a data backup mechanism. The risk pre-processing module (21) arranges some hosts, network services or information as bait to induce the attacker to attack them, so as to capture and analyze the attack behavior. Through technical and management means, the security protection capability of the actual system is enhanced. The virus detection module (22) detects and kills viruses through anti-virus applications. The database management module ( 23) monitors database access behavior and issues real-time alerts for risky database operations. The source tracing analysis module (24) determines the authenticity of the alert and its complete attack process. The traffic protection module (25) controls the daily large-scale east-west traffic of the host. The access risk alert module (13) monitors abnormal access behavior in real time and issues alerts in the form of emails, text messages, system messages, red traffic lines, etc. The communication network isolation module (14) can isolate the compromised host network with one click to prevent the threat from continuing to spread. The communication network physical isolation module (15) physically cuts off the host communication network to improve data security.

Images