Internal information security detection system

Abstract

The invention discloses an internal information security detection system, and relates to the technical field of information security, and the technical scheme is that the internal information security detection system comprises a central processor which is used for guaranteeing the calculation and operation of the system; the data information acquisition module is used for acquiring data information in a network, the data information acquisition module comprises a network flow acquisition module, a system log acquisition module, a configuration information acquisition module and a terminal data acquisition module, and the network flow acquisition module is used for capturing data information packets from network key nodes and sending the data information packets to the system log acquisition module; the system log collection module is used for collecting operating system log information, safety equipment log information and application program log information, and the configuration information collection module is used for collecting parameter information of network equipment configuration and server configuration. Therefore, the phenomenon of missed collection is avoided, and the result of safety detection can be ensured to be more accurate.

Description

Technical Field

[0001] The present invention relates to the technical field of information security, and in particular to an internal information security detection system. Background Art

[0002] Information security has always been a key issue that must be addressed in network construction and maintenance. Especially with the comprehensive and in-depth development of networking, a lot of important data is stored and transmitted in the network. In order to ensure the security of information, it is necessary to conduct security tests regularly, and a security detection system needs to be used during the test;

[0003] When conducting security testing, it is necessary to first extract and collect data information within the network. However, the existing security testing system is found to fail to achieve comprehensive collection during use, and some data may be missed, resulting in inaccurate security testing results. Therefore, improvements are needed.

[0004] For this reason, it is necessary to invent an internal information security detection system. Summary of the invention

[0005] To this end, the present invention provides an internal information security detection system to solve the problems in the background technology.

[0006] In order to achieve the above object, the present invention provides the following technical solution: an internal information security detection system, comprising:

[0007] The central processing unit is used to ensure the calculation and operation of the system;

[0008] A data information collection module, which is used to collect data information inside the network. The data information collection module includes a network flow collection module, a system log collection module, a configuration information collection module and a terminal data collection module. The network flow collection module is used to capture data information packets from key network nodes. The system log collection module is used to collect operating system log information, security device log information and application log information. The configuration information collection module is used to collect parameter information of network device configuration and server configuration. The terminal data collection module is used to collect file operation records and software installation information in the computer.

[0009] The summary transmission module is used to summarize and transmit the information collected by the data information collection module, and the summary transmission module is connected to the output end of the data information collection module.

[0010] A data information analysis and detection module, which is used to analyze the information collected by the data information collection module. The data information analysis and detection module includes an intrusion detection and analysis module, a vulnerability analysis module, an integrity analysis module and a sensitive content analysis module. The intrusion detection and analysis module is used to analyze whether there is an intrusion record in the network according to the collected information. The vulnerability analysis module is used to analyze whether there is a dangerous vulnerability in the network according to the collected information. The integrity analysis module is used to analyze whether the data information of the network has been tampered with and deleted according to the collected information. The sensitive content analysis module is used to analyze whether there is sensitive content in the data information of the network according to the collected information. The data information analysis and detection module is connected to the output end of the summary transmission module;

[0011] An analysis result transmission module, which is used to transmit the results analyzed by the data information analysis detection module, and the analysis result transmission module is connected to the output end of the data information analysis detection module;

[0012] A risk assessment module, which is used to quantitatively assess the information security of the network according to the analysis results of the analysis result transmission module, so as to obtain a risk value, and the risk assessment module is connected to the output end of the analysis result transmission module;

[0013] A risk threshold repository, which is used to store safety thresholds for risks;

[0014] An intelligent comparison and transmission module, which is used to compare the risk value obtained by the risk assessment module with the safety threshold stored in the risk threshold storage library. If it is lower than the safety threshold, it is safe, and if it is higher than the safety threshold, it is dangerous. The intelligent comparison and transmission module is connected to the output end of the risk assessment module and the risk threshold storage library, and the intelligent comparison and transmission module is connected to the input end of the central processing unit;

[0015] The alarm reminder module is used to perform an alarm reminder when the risk value is higher than the safety threshold. The alarm reminder module is connected to the output end of the central processing unit.

[0016] Preferably, the summary transmission module is electrically connected to the data information acquisition module, and the data information analysis and detection module is electrically connected to the summary transmission module.

[0017] Specifically, the summary transmission module is electrically connected to the data information acquisition module, and the data information analysis and detection module is electrically connected to the summary transmission module, so that the collected information can be transmitted to the data information analysis and detection module in a timely manner by the summary transmission module.

[0018] Preferably, the analysis result transmission module is electrically connected to the data information analysis and detection module, and the risk assessment module is electrically connected to the analysis result transmission module.

[0019] Specifically, the analysis result transmission module is electrically connected to the data information analysis and detection module, and the risk assessment module is electrically connected to the analysis result transmission module, so that the analysis result can be transmitted to the risk assessment module in a timely manner by the analysis result transmission module.

[0020] Preferably, the intelligent comparison and transmission module is electrically connected to the risk assessment module and the risk threshold storage library, the intelligent comparison and transmission module is electrically connected to the central processing unit, and the alarm reminder module is electrically connected to the central processing unit.

[0021] Specifically, the intelligent comparison and transmission module is electrically connected to the risk assessment module and the risk threshold storage library, so that after the risk value comes out, the intelligent comparison and transmission module can promptly compare the risk value assessed by the risk assessment module with the safety threshold stored in the risk threshold storage library.

[0022] Preferably, the alarm reminder module includes a shell, a through slot is provided at the bottom of the shell, an alarm light is provided at the bottom of the shell, the top of the alarm light passes through the through slot and extends into the interior of the shell, four card slots are provided on the alarm light, four rotating shafts 1 are embedded in the top of the shell, the bottom ends of the four rotating shafts 1 are connected to the inner wall of the bottom of the shell, one of the rotating shafts 1 is fixedly connected to the top with a knob, the bottom ends of the four rotating shafts 1 are fixedly sleeved with gears 1, four tooth plates are provided inside the shell, the four tooth plates are respectively meshed with four gears 1, the inner ends of the four gears 1 are fixedly connected with card blocks, and the four card blocks are respectively embedded in the four card slots.

[0023] Preferably, the four tooth plates are each provided with a through hole, the four through holes are each slidably embedded with a connecting rod, the four connecting rods are each fixedly connected to the inner wall of the outer shell, the four connecting rods are each externally sleeved with a spring and the two ends of the spring are respectively fixedly connected to the outer shell and the connecting rod, the four rotating shafts 1 are each externally fixedly sleeved with a gear 2 and the gear 2 is located at the top of the gear 1, the four gear 2s are externally sleeved with a gear ring meshingly connected thereto, the gear ring is externally sleeved with a connecting plate, and the connecting plate is fixedly connected to the inside of the outer shell.

[0024] Preferably, the rotating shaft 1 is connected to the housing via a bearing, and the gear ring is connected to the connecting plate via a bearing.

[0025] Preferably, mounting brackets are fixedly connected to the four corners of the top of the shell, and two mounting holes are provided inside the four mounting brackets.

[0026] The beneficial effects of the present invention are:

[0027] 1. Design a data information collection module consisting of a network traffic collection module, a system log collection module, a configuration information collection module and a terminal data collection module. When collecting information, the network traffic collection module can capture data information packets from key network nodes, the system log collection module can collect operating system log information, security device log information and application log information, the configuration information collection module can collect parameter information of network device configuration and server configuration, and the terminal data collection module can collect file operation records and software installation information in the computer. In this way, comprehensive collection can be achieved during collection, thereby avoiding the phenomenon of missing collection, and thus ensuring that the results of security detection are more accurate;

[0028] 2. Design a data information analysis and detection module consisting of an intrusion detection analysis module, a vulnerability analysis module, an integrity analysis module, and a sensitive content analysis module. When performing analysis and detection, the intrusion detection analysis module can analyze whether there are intrusion records in the network based on the collected information. The vulnerability analysis module can analyze whether there are dangerous vulnerabilities in the network based on the collected information. The integrity analysis module can analyze whether the network data information has been tampered with or deleted based on the collected information. The sensitive content analysis module can analyze whether the network data information has sensitive content based on the collected information. Each module performs analysis work independently by classification, so that missed detection can be avoided during analysis and detection;

[0029] 3. By turning the knob, the four shafts 1 can be rotated at the same time under the action of the ring gear and the four gears 2. The rotation of the four shafts 1 drives the four gears 1 to rotate, so that the four tooth plates can move outward at the same time, and then the four blocks can be moved out of the four slots. In this way, the alarm light can be released and then the alarm light can be taken out. In this way, when the alarm light is damaged after long-term use, it can be quickly disassembled for replacement and repair. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the implementation methods of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the implementation methods or the description of the prior art. Obviously, the drawings described below are only exemplary, and for ordinary technicians in this field, other implementation drawings can be derived from the provided drawings without creative work.

[0031] The structures, proportions, sizes, etc. illustrated in this specification are only used to match the contents disclosed in the specification so as to facilitate understanding and reading by persons familiar with the technology. They are not used to limit the conditions under which the present invention can be implemented, and therefore have no substantial technical significance. Any structural modification, change in proportion or adjustment of size shall still fall within the scope of the technical contents disclosed in the present invention without affecting the effects and purposes that can be achieved by the present invention.

[0032] Figure 1 An overall system schematic diagram provided for an internal information security detection system of the present invention;

[0033] Figure 2 A schematic diagram of a data information analysis and detection module system provided by an internal information security detection system of the present invention;

[0034] Figure 3 A schematic diagram of the structure of an alarm reminder module provided by an internal information security detection system of the present invention;

[0035] Figure 4 The present invention provides an internal information security detection system Figure 3 Sectional view;

[0036] Figure 5 A three-dimensional exploded view of a real shell provided for an internal information security detection system of the present invention;

[0037] Figure 6 The present invention provides an internal information security detection system Figure 5 A in the enlarged view;

[0038] In the figure: 1. central processing unit; 2. data information acquisition module; 3. network traffic acquisition module; 4. system log collection module; 5. configuration information acquisition module; 6. terminal data acquisition module; 7. summary transmission module; 8. data information analysis and detection module; 9. intrusion detection and analysis module; 10. vulnerability analysis module; 11. integrity analysis module; 12. sensitive content analysis module; 13. analysis result transmission module; 14. risk assessment module; 15. risk threshold storage; 16. intelligent comparison and transmission module; 17. alarm reminder module; 18. housing; 19. alarm light; 20. shaft one; 21. knob; 22. gear one; 23. tooth plate; 24. block; 25. connecting rod; 26. spring; 27. gear two; 28. gear ring; 29. ​​mounting bracket; 30. mounting hole, 31 connecting plate. DETAILED DESCRIPTION

[0039] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0040] See attached Figure 1 -Attached Figure 6 The present invention provides an internal information security detection system, comprising:

[0041] Central processing unit 1, which is used to ensure the calculation and operation of the system;

[0042] The data information collection module 2 is used to collect data information inside the network. The data information collection module 2 includes a network flow collection module 3, a system log collection module 4, a configuration information collection module 5 and a terminal data collection module 6. The network flow collection module 3 is used to capture data information packets from key network nodes. The system log collection module 4 is used to collect operating system log information, security device log information and application log information. The configuration information collection module 5 is used to collect parameter information of network device configuration and server configuration. The terminal data collection module 6 is used to collect file operation records and software installation information in the computer;

[0043] The summary transmission module 7 is used to summarize and transmit the information collected by the data information collection module 2. The summary transmission module 7 is connected to the output end of the data information collection module 2.

[0044] The data information analysis and detection module 8 is used to analyze the information collected by the data information collection module 2. The data information analysis and detection module 8 includes an intrusion detection and analysis module 9, a vulnerability analysis module 10, an integrity analysis module 11 and a sensitive content analysis module 12. The intrusion detection and analysis module 9 is used to analyze whether there is an intrusion record in the network according to the collected information. The vulnerability analysis module 10 is used to analyze whether there is a dangerous vulnerability in the network according to the collected information. The integrity analysis module 11 is used to analyze whether the data information of the network is tampered with and deleted according to the collected information. The sensitive content analysis module 12 is used to analyze whether the data information of the network contains sensitive content according to the collected information. The data information analysis and detection module 8 is connected to the output end of the summary transmission module 7;

[0045] An analysis result transmission module 13, which is used to transmit the analysis result of the data information analysis detection module 8, and the analysis result transmission module 13 is connected to the output end of the data information analysis detection module 8;

[0046] A risk assessment module 14, which is used to quantitatively assess the information security of the network according to the analysis results of the analysis result transmission module 13, so as to obtain a risk value. The risk assessment module 14 is connected to the output end of the analysis result transmission module 13;

[0047] A risk threshold storage repository 15, which is used to store safety thresholds of risks;

[0048] An intelligent comparison and transmission module 16 is used to compare the risk value obtained by the risk assessment module 14 with the safety threshold stored in the risk threshold storage library 15. If it is lower than the safety threshold, it is safe, and if it is higher than the safety threshold, it is dangerous. The intelligent comparison and transmission module 16 is connected to the output end of the risk assessment module 14 and the risk threshold storage library 15, and the intelligent comparison and transmission module 16 is connected to the input end of the central processor 1;

[0049] An alarm reminder module 17, which is used to perform an alarm reminder when the risk value is higher than the safety threshold, and the alarm reminder module 17 is connected to the output end of the central processor 1;

[0050] In this embodiment, a data information collection module 2 is designed to be composed of a network flow collection module 3, a system log collection module 4, a configuration information collection module 5 and a terminal data collection module 6. When collecting information, the network flow collection module 3 can capture data information packets from key network nodes, the system log collection module 4 can collect operating system log information, security device log information and application log information, the configuration information collection module 5 can collect parameter information of network device configuration and server configuration, and the terminal data collection module 6 can collect file operation records and software installation information in the computer. In this way, all-round and comprehensive collection can be achieved during collection, thereby avoiding the phenomenon of missed collection, and thus ensuring that the results of security detection are more accurate;

[0051] The data information analysis and detection module 8 is designed to be composed of an intrusion detection and analysis module 9, a vulnerability analysis module 10, an integrity analysis module 11 and a sensitive content analysis module 12. When performing analysis and detection, the intrusion detection and analysis module 9 can analyze whether there is an intrusion record in the network based on the collected information, the vulnerability analysis module 10 can analyze whether there is a dangerous vulnerability in the network based on the collected information, the integrity analysis module 11 can analyze whether there is tampering and deletion of the data information of the network based on the collected information, and the sensitive content analysis module 12 can analyze whether there is sensitive content in the data information of the network based on the collected information. Each module is classified independently for analysis work, so that the phenomenon of missed detection can be avoided when performing analysis and detection;

[0052] Among them, in order to achieve the purpose of normal operation of the system, the present device adopts the following technical solutions: the summary transmission module 7 is electrically connected to the data information acquisition module 2, the data information analysis and detection module 8 is electrically connected to the summary transmission module 7, the analysis result transmission module 13 is electrically connected to the data information analysis and detection module 8, the risk assessment module 14 is electrically connected to the analysis result transmission module 13, the intelligent comparison transmission module 16 is electrically connected to the risk assessment module 14 and the risk threshold storage library 15, the intelligent comparison transmission module 16 is electrically connected to the central processor 1, and the alarm reminder module 17 is electrically connected to the central processor 1. The electrical connection between each module can ensure the normal operation of the system;

[0053] In order to achieve the purpose of contacting and fixing the alarm light 19 and removing the alarm light 19, the present device adopts the following technical solution: the alarm reminder module 17 includes a shell 18, a through groove is provided at the bottom of the shell 18, an alarm light 19 is provided at the bottom of the shell 18, the top of the alarm light 19 passes through the through groove and extends into the shell 18, four card slots are provided on the alarm light 19, four rotating shafts 20 are embedded at the top of the shell 18, the bottom ends of the four rotating shafts 20 are connected to the inner wall of the bottom of the shell 18, and one of the rotating shafts 20 is connected to the inner wall of the bottom of the shell 18. The top is fixedly connected with a knob 21, the bottom ends of the four rotating shafts 20 are all fixedly sleeved with a gear 22, the shell 18 is provided with four tooth plates 23, the four tooth plates 23 are respectively meshed with the four gears 22, the inner ends of the four gears 22 are fixedly connected with a clamping block 24, the four clamping blocks 24 are respectively embedded in the four card slots, the four tooth plates 23 are provided with through holes, the four through holes are slidably embedded with connecting rods 25, the four connecting rods 25 are fixedly connected to the inner wall of the shell 18, and the four connecting rods 25 are sleeved with elastic sleeves on the outside. The spring 26 and the two ends of the spring 26 are respectively fixedly connected to the housing 18 and the connecting rod 25. The four shafts 1 20 are fixedly sleeved with gear 27 on the outside and the gear 27 is located at the top of the gear 1 22. The four gears 27 are sleeved with gear rings 28 meshing with them on the outside. The gear rings 28 are sleeved with a connecting plate 31 on the outside. The connecting plate 31 is fixedly connected to the inside of the housing 18. Turning the knob 21 can rotate the shaft 1 20 on the left side. The rotation of the shaft 1 20 on the left side drives the gear 2 27 on the left side to rotate, so that the gear ring 28 The gear ring 28 rotates, and the rotation of the gear ring 28 can make the other three gears 27 and the rotating shaft 1 20 rotate, and then the four rotating shafts 1 20 can rotate at the same time. The rotation of the four rotating shafts 1 20 can make the four gears 1 22 rotate. The rotation of the four gears 1 22 can make the four tooth plates 23 move outward at the same time. At the same time, the spring 26 is compressed, and the four tooth plates 23 move outward at the same time, so that the four clamping blocks 24 can be moved out of the four clamping slots, so that the fixation of the warning light 19 can be released, and then the warning light 19 can be taken out;

[0054] In order to achieve the purpose of reducing wear, the device adopts the following technical solutions: the rotating shaft 20 is connected to the housing 18 through a bearing, and the gear ring 28 is connected to the connecting plate 31 through a bearing, and the bearing connection can reduce wear;

[0055] Among them, in order to facilitate the installation of components such as the outer shell 18 and the alarm light 19, the present device is implemented by adopting the following technical solution: mounting brackets 29 are fixedly connected to the four corners of the top of the outer shell 18, and two mounting holes 30 are provided inside the four mounting brackets 29. The design of the mounting brackets 29 and the mounting holes 30 can facilitate the installation of components such as the outer shell 18 and the alarm light 19.

[0056] The use process of the present invention is as follows: when internal information is needed for security detection, the data information collection module 2 can collect data information inside the network, when collecting information, the network traffic collection module 3 can capture data information packets from key network nodes, the system log collection module 4 can collect operating system log information, security device log information and application log information, the configuration information collection module 5 can collect parameter information of network device configuration and server configuration, and the terminal data collection module 6 can collect file operation records and software installation information in the computer, so that all-round and comprehensive collection can be achieved during collection, thereby avoiding the phenomenon of missing collection, and further ensuring that the result of security detection is more accurate;

[0057] After the collection is completed, the summary transmission module 7 can summarize and transmit the information collected by the data information collection module 2, and then the data information analysis and detection module 8 can receive the transmitted information, and then analyze and detect the information. During the analysis and detection, the intrusion detection analysis module 9 can analyze whether there is an intrusion record in the network based on the collected information, the vulnerability analysis module 10 can analyze whether there is a dangerous vulnerability in the network based on the collected information, the integrity analysis module 11 can analyze whether the data information of the network is tampered with and deleted based on the collected information, and the sensitive content analysis module 12 can analyze whether the data information of the network contains sensitive content based on the collected information. After the analysis is completed, the analysis result transmission module 13 can analyze the data information of the network based on the collected information. The results analyzed by the information analysis and detection module 8 are transmitted, and then the risk assessment module 14 can receive the transmitted analysis results, and then the information security of the network can be quantitatively assessed according to the analysis results of the analysis result transmission module 13, so as to obtain the risk value. Since the risk safety threshold is stored in the risk threshold storage library 15, when the risk value is evaluated, the intelligent comparison transmission module 16 can compare the risk value obtained by the risk assessment module 14 with the safety threshold stored in the risk threshold storage library 15. If it is lower, it is safe, and if it is higher, it is dangerous. When the value is higher, the central processor 1 can receive this signal, and then it can control the alarm reminder module 17, so that the alarm reminder work can be performed;

[0058] When the warning reminder work is used for a long time, the warning light 19 will be damaged, so it needs to be disassembled for replacement and repair. When disassembling, the knob 21 can be turned so that the left shaft 20 can be rotated. The rotation of the left shaft 20 drives the left gear 27 to rotate, so that the ring gear 28 can be rotated. The rotation of the ring gear 28 can make the other three gears 27 and the shaft 1 20 rotate, and then the four shafts 1 20 can be rotated at the same time. The rotation of the four shafts 1 20 can make the four gears 1 22 rotate. The rotation of the four gears 1 22 can make the four tooth plates 23 move outward at the same time. At the same time, the spring 26 is compressed, and the four tooth plates 23 move outward at the same time, so that the four clamping blocks 24 can be moved out of the four clamping slots, so that the fixation of the warning light 19 can be released, and then the warning light 19 can be taken out. In this way, when the warning light 19 is damaged after long-term use, it can be quickly disassembled for replacement and repair;

[0059] When installing it back, you only need to put it back to its original position, then slowly turn the knob 21, and the spring 26 will rebound to make the four blocks 24 get stuck in the four slots again, so that the alarm light 19 can be fixed, thus completing the installation.

[0060] The above are only preferred embodiments of the present invention. Any person skilled in the art may modify the present invention by using the above technical solutions or modify it into an equivalent technical solution. Therefore, any simple modification or equivalent replacement made according to the technical solution of the present invention belongs to the scope of protection claimed by the present invention.

Claims

1. An internal information security detection system, characterized in that: include: A central processing unit (1), which is used to ensure the calculation and operation of the system; A data information collection module (2) is used to collect data information inside the network, the data information collection module (2) comprises a network flow collection module (3), a system log collection module (4), a configuration information collection module (5) and a terminal data collection module (6), the network flow collection module (3) is used to capture data information packets from key network nodes, the system log collection module (4) is used to collect operating system log information, security device log information and application program log information, the configuration information collection module (5) is used to collect parameter information of network device configuration and server configuration, and the terminal data collection module (6) is used to collect file operation records and software installation information in the computer; A summary transmission module (7) is used to summarize and transmit the information collected by the data information collection module (2); the summary transmission module (7) is connected to the output end of the data information collection module (2).

2. An internal information security detection system according to claim 1, characterized in that: Also includes: A data information analysis and detection module (8) is used to analyze the information collected by the data information collection module (2), the data information analysis and detection module (8) comprising an intrusion detection and analysis module (9), a vulnerability analysis module (10), an integrity analysis module (11) and a sensitive content analysis module (12), the intrusion detection and analysis module (9) being used to analyze whether there is an intrusion record in the network based on the collected information, the vulnerability analysis module (10) being used to analyze whether there is a dangerous vulnerability in the network based on the collected information, the integrity analysis module (11) being used to analyze whether there is tampering and deletion in the data information of the network based on the collected information, the sensitive content analysis module (12) being used to analyze whether there is sensitive content in the data information of the network based on the collected information, and the data information analysis and detection module (8) being connected to the output end of the summary transmission module (7); An analysis result transmission module (13) is used to transmit the analysis result of the data information analysis detection module (8), and the analysis result transmission module (13) is connected to the output end of the data information analysis detection module (8); A risk assessment module (14) is used to perform a quantitative assessment on the information security of the network according to the analysis result of the analysis result transmission module (13), thereby obtaining a risk value, wherein the risk assessment module (14) is connected to the output end of the analysis result transmission module (13); A risk threshold repository (15), which is used to store safety thresholds of risks; An intelligent comparison and transmission module (16) is used to compare the risk value obtained by the risk assessment module (14) with the safety threshold stored in the risk threshold storage library (15). If the value is lower than the safety threshold, it is safe, and if the value is higher than the safety threshold, it is dangerous. The intelligent comparison and transmission module (16) is connected to the output end of the risk assessment module (14) and the risk threshold storage library (15), and the intelligent comparison and transmission module (16) is connected to the input end of the central processing unit (1); An alarm reminder module (17) is used to perform an alarm reminder when the risk value is higher than a safety threshold, and the alarm reminder module (17) is connected to the output end of the central processing unit (1).

3. An internal information security detection system according to claim 2, characterized in that: The summary transmission module (7) is electrically connected to the data information acquisition module (2), and the data information analysis and detection module (8) is electrically connected to the summary transmission module (7).

4. An internal information security detection system according to claim 2, characterized in that: The analysis result transmission module (13) is electrically connected to the data information analysis and detection module (8), and the risk assessment module (14) is electrically connected to the analysis result transmission module (13).

5. An internal information security detection system according to claim 2, characterized in that: The intelligent comparison and transmission module (16) is electrically connected to the risk assessment module (14) and the risk threshold storage library (15), the intelligent comparison and transmission module (16) is electrically connected to the central processing unit (1), and the alarm reminder module (17) is electrically connected to the central processing unit (1).

6. An internal information security detection system according to claim 2, characterized in that: The alarm reminder module (17) comprises a shell (18), a through slot is provided at the bottom of the shell (18), an alarm light (19) is provided at the bottom of the shell (18), the top of the alarm light (19) passes through the through slot and extends into the inside of the shell (18), four card slots are provided on the alarm light (19), four rotating shafts (20) are embedded in the top of the shell (18), the bottom ends of the four rotating shafts (20) are connected to the inner wall of the bottom of the shell (18), the top of one of the rotating shafts (20) is fixedly connected to a knob (21), the outside of the bottom ends of the four rotating shafts (20) are fixedly sleeved with a gear (22), the inside of the shell (18) is provided with four tooth plates (23), the four tooth plates (23) are respectively meshed with four gears (22), the inner ends of the four gears (22) are fixedly connected to card blocks (24), and the four card blocks (24) are respectively embedded in the four card slots.

7. An internal information security detection system according to claim 6, characterized in that: The four tooth plates (23) are each provided with a through hole, and the four through holes are each slidably embedded with a connecting rod (25), and the four connecting rods (25) are each fixedly connected to the inner wall of the outer shell (18), and the four connecting rods (25) are each sleeved with a spring (26) on the outside, and the two ends of the spring (26) are respectively fixedly connected to the outer shell (18) and the connecting rod (25), and the four rotating shafts (20) are each fixedly sleeved with a gear (27) on the outside, and the gear (27) is located at the top of the gear (22), and the four gears (27) are sleeved with a gear ring (28) meshing with the gear ring (28), and the gear ring (28) is sleeved with a connecting plate (31) on the outside, and the connecting plate (31) is fixedly connected to the inside of the outer shell (18).

8. An internal information security detection system according to claim 7, characterized in that: The rotating shaft 1 (20) is connected to the housing (18) via a bearing, and the gear ring (28) is connected to the connecting plate (31) via a bearing.

9. An internal information security detection system according to claim 8, characterized in that: The four corners of the top of the housing (18) are fixedly connected to mounting frames (29), and two mounting holes (30) are provided inside the four mounting frames (29).

Images