Network security detection method and network side equipment

Abstract

The invention discloses a network security detection method and a network side device, and belongs to the field of communication, the method is executed by a first network device, and the method comprises the following steps: querying a first security configuration and a first security policy of a second network device based on a received user security request, the user security request comprises an information list of the second network equipment and a first reinforcement item set by the user; and determining a network security detection result of the second network equipment according to the inquired first security policy and the first security configuration of the second network equipment, so that security configuration adjustment is performed on the second network equipment based on the network security detection result.

Description

Technical Field

[0001] The present application belongs to the field of communication technology, and specifically relates to a network security detection method and network side equipment. Background Art

[0002] With the development of communication technology, network security has received more and more attention. In related technologies, network management equipment performs network security management through fixed network security reinforcement items in network management applications (Applications, Apps). When there are security issues that cannot be resolved by the fixed network security reinforcement items, the network faces security risks and has the problem of low network security. Summary of the invention

[0003] The embodiments of the present application provide a network security detection method and a network-side device, which can solve the problem of network security risks and low network security when there are security issues that cannot be solved by fixed network security reinforcement items.

[0004] In a first aspect, a method for network security detection is provided, which is executed by a first network device, comprising: based on a received user security request, querying a first security configuration and a first security policy of a second network device, wherein the user security request includes an information list of the second network device and a first reinforcement item set by the user; based on the query of the first security policy and the first security configuration of the second network device, determining a network security detection result of the second network device, so as to adjust the security configuration of the second network device based on the network security detection result.

[0005] In a second aspect, a network side device is provided, which includes a processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, the steps of the method described in the first aspect are implemented.

[0006] According to a third aspect, a readable storage medium is provided, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented.

[0007] In a fourth aspect, a chip is provided, comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the steps of the method described in the first aspect.

[0008] In a fifth aspect, a computer program / program product is provided. The computer program / program product is stored in a storage medium, and the computer program / program product is executed by at least one processor to implement the steps of the method described in the first aspect.

[0009] In an embodiment of the present application, based on a received user security request, a first security configuration and a first security policy of a second network device are queried, wherein the user security request includes an information list of the second network device and a first reinforcement item set by the user; based on the queried first security policy and the first security configuration of the second network device, a network security detection result of the second network device is determined, so that the security configuration of the second network device is adjusted based on the network security detection result, and the security reinforcement settings made by the user for specific scenarios and needs can be received, and the security configuration of the second network device can be automatically checked and compared, so that the security configuration of the second network device is adjusted based on the network security detection result, thereby improving the overall security of the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 It is a block diagram of a wireless communication system that can be applied in the embodiments of the present application.

[0011] Figure 2 It is a flowchart of a method for network security detection provided in an embodiment of the present application.

[0012] Figure 3 It is a flowchart of another network security detection method provided in an embodiment of the present application.

[0013] Figure 4 It is a structural schematic diagram of a network security detection device provided in an embodiment of the present application.

[0014] Figure 5 It is a structural diagram of the network device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0015] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field belong to the scope of protection of this application.

[0016] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first" and "second" are generally of the same type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally represents that the objects associated with each other are in an "or" relationship.

[0017] It is worth noting that the technology described in the embodiments of the present application is not limited to the Long Term Evolution (LTE) / LTE-Advanced (LTE-A) system, but can also be used in other wireless communication systems, such as Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Orthogonal Frequency Division Multiple Access (OFDMA), Single-carrier Frequency Division Multiple Access (SC-FDMA) and other systems. The terms "system" and "network" in the embodiments of the present application are often used interchangeably, and the described technology can be used for the systems and radio technologies mentioned above as well as for other systems and radio technologies. The following description describes a New Radio (NR) system for illustrative purposes, and NR terminology is used in most of the following descriptions, but these technologies can also be applied to applications other than NR system applications, such as the 6th generation (6 th Generation, 6G) communication system.

[0018] Figure 1A block diagram of a wireless communication system applicable to the embodiments of the present application is shown. The wireless communication system includes a network management system and a network side device. Among them, the network management system of the base station: is responsible for the definition and issuance of the network element reinforcement strategy. The network management system of the base station can be a software system or a hardware system. When the network management system of the base station is a software system, the software management system can be installed or run on the terminal used by the operation and maintenance personnel or on the base station equipment. The terminal can be a mobile phone, a tablet computer (Tablet Personal Computer), a laptop computer (Laptop Computer) or a notebook computer, a personal digital assistant (Personal Digital Assistant, PDA), a handheld computer, a netbook, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a mobile Internet device (Mobile Internet Device, MID), augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) equipment, a robot, a wearable device (Wearable Device), a vehicle-mounted equipment (VUE), a pedestrian terminal (PUE), a smart home (home equipment with wireless communication function, such as a refrigerator, a TV, a washing machine or furniture, etc.), a game console, a personal computer (personal The terminal side devices include: computer, PC), ATM or self-service machine, and wearable devices include: smart watches, smart bracelets, smart headphones, smart glasses, smart jewelry (smart bracelets, smart bracelets, smart rings, smart necklaces, smart anklets, smart anklets, etc.), smart wristbands, smart clothing, etc. It should be noted that the specific type of terminal is not limited in the embodiments of the present application. The network side device may include access network equipment or core network equipment, wherein the access network equipment may also be called wireless access network equipment, wireless access network (Radio Access Network, RAN), wireless access network function or wireless access network unit.Access network equipment may include base stations, WLAN access points or WiFi nodes, etc. The base station may be referred to as a node B, an evolved node B (eNB), an access point, a base transceiver station (Base Transceiver Station, BTS), a radio base station, a radio transceiver, a basic service set (Basic Service Set, BSS), an extended service set (Extended Service Set, ESS), a home B node, a home evolved B node, a transmitting and receiving point (Transmitting Receiving Point, TRP) or some other appropriate term in the field, as long as the same technical effect is achieved, the base station is not limited to a specific technical vocabulary, it should be noted that in the embodiment of the present application, only the base station in the NR system is used as an example for introduction, and the specific type of the base station is not limited. In a wireless network, a network management system of the base station may also be included, and the wireless base station provides a reinforced query and downlink interface.

[0019] Figure 2 A network security detection method provided in an embodiment of the present application is performed by a first network device. The first network device may be a device or system that provides a management function for a second network device, which may be a software or hardware device. The second network device may be a base station. The method includes the following steps:

[0020] S202: Based on the received user security request, query the first security configuration and the first security policy of the second network device.

[0021] The user security request includes an information list of the second network device and a first reinforcement item set by the user.

[0022] S204: Determine a network security detection result of the second network device according to the queried first security policy and the first security configuration of the second network device.

[0023] This step enables the second network device to adjust the security configuration based on the network security detection result. Specifically, a query command for the security reinforcement item can be sent to the second network device in the information list; and the first security configuration and the first security policy of the second network device can be received. The first reinforcement item and the first security policy of the second network device are compared to obtain a comparison result; and the difference value in the comparison result is determined as the network security detection result of the second network device. The comparison result includes whether the security configuration of the second network device is the same as the content of the reinforcement item, and the case where the security configuration of the second network device is different from the content of the reinforcement item, and may include the content with differences, that is, when there is a difference between the policy value defined in the security configuration and the reinforcement item, the difference value is output, and the difference value is determined as the network security detection result of the second network device. In this way, the user can quickly view the comparison result between the security configuration of the second network device and the reinforcement item, and make security configuration adjustments.

[0024] In one implementation, security-related configuration of the base station may also be performed in this step, including opening or closing specific ports, setting firewall rules, managing user permissions, etc.

[0025] In one implementation, after this step, based on the received security policy delivery request, a second security policy may be sent to the second network device, wherein the security policy delivery request includes an information list of the second network device and the second reinforcement item set by the user; and the effectiveness result of the second security policy fed back by the second network device is received. Optionally, this step may be performed by Figure 1 The security policy issuing module shown is implemented, and the function of the security policy issuing module can be implemented by hardware or software in the network management system.

[0026] Specifically, in the case where the reinforcement item includes the policy value of the reinforcement item, in this step, after receiving the reinforcement item set by the user, the policy value of the reinforcement item can be sent to the second network device, and the policy value of the reinforcement item is used to enable the second network device to perform security configuration, and receive the effectiveness result of the policy value of the reinforcement item fed back by the second network device. Among them, the user can specify the second network device, such as the list of base stations selected by the user. In this step, the policy value of the reinforcement item is sent to the base station specified by the user, thereby selectively determining that some or all reinforcement items are sent to the base station and take effect, thereby improving network security.

[0027] In one implementation, after receiving the effectiveness result of the second security policy fed back by the second network device, the third security policy of the second network device can also be queried based on the received security policy check request, wherein the security policy effectiveness check request includes an information list of the second network device; and the security policy check result is received, and the security policy check result is a comparison result of the third security policy and the second security policy. The first network device receives the inspection result fed back by the second network device, and the inspection result is used to indicate whether the policy value of the second network device is consistent with that of the reinforcement item. Therefore, this step can effectively verify whether the reinforcement item is effective after being sent to the base station, further improving network security, reducing possible errors in manual operations, and greatly reducing the workload and complexity of security management.

[0028] Figure 3 It is a flow chart of a network security detection method provided by an embodiment of the present application, which is executed by a first network device. The first network device can be a device or system that provides management functions for a second network device, that is, the network management system of the above-mentioned base station, which can be a software or hardware device, and the second network device can be a base station. The method includes the following steps:

[0029] S302: Receive reinforcement items set by the user.

[0030] Users can customize security reinforcement items in the network management system of the base station and define atomic items for base station security reinforcement. This step can meet the user's customized requirements for security reinforcement.

[0031] In one implementation, the reinforcement item set by the user includes at least one of the following:

[0032] The identification of the reinforcement item, the name of the reinforcement item, the content of the reinforcement item, the description of the comparison result corresponding to the reinforcement item, the policy value of the reinforcement item, and the script of the reinforcement item.

[0033] The security hardening items include the following:

[0034] Table 1

[0035]

[0036] The content of the reinforcement item is used to describe the business meaning and application scenario corresponding to the security reinforcement item. The policy value of the reinforcement item configured by different security policies is different, such as the policy value 0 (representing shutdown) for closing the debug port. The script of the reinforcement item is used to convert the reinforcement item into a command that can be recognized by the second network device.

[0037] In one implementation, this step may include: creating a reinforcement item template, and the user may define different security reinforcement templates according to different scenarios. Each security reinforcement template may contain different security reinforcement items to meet the security reinforcement requirements in different scenarios. And through the reinforcement item template, the reinforcement items set by the user are received, wherein the reinforcement item template includes at least one of the following: the reinforcement item template identifier, the reinforcement item template name, the reinforcement item template description, and the reinforcement item list included in the reinforcement item template. The reinforcement item template description includes a description of the application scenario. Thus, based on the security reinforcement items, the user can quickly and flexibly assemble a security reinforcement template that meets personalized scenarios. Optionally, it can support the creation, modification and deletion of security reinforcement templates, as well as the query of specific security reinforcement templates. The contents of the security reinforcement template are shown in Table 2:

[0038] Table 2

[0039] Security reinforcement template Security reinforcement template ID Security hardening template name The name of the reinforcement template Security hardening template description Security reinforcement template description and application scenario description Security hardening item list Contains security enhancements

[0040] In one implementation, a correspondence between a scene and the reinforcement item template can be established; based on the target scene associated with the user and the correspondence, the reinforcement item template corresponding to the target scene is determined, and the reinforcement items set by the user are received through the reinforcement item template. For example, the pre-determined correspondence includes: the correspondence between scene A and reinforcement template 1, the correspondence between scene B and reinforcement template 2, and the like. When the target scene is scene A, the reinforcement template 1 corresponding to scene A can be determined based on the correspondence. The reinforcement items set by the user are received through the reinforcement item template 1. For example, through the reinforcement item operation interface, the multiple reinforcement items contained in the reinforcement item template 1 are displayed to the user to receive user input.

[0041] Optionally, the user can set a target scene, for example, the current working scene of the second network device can be input. Optionally, the working scene of the second network device can also be automatically identified as the target scene. In one implementation, the reinforcement item set by the user is received through the reinforcement item operation interface provided by the first network device, thereby facilitating the user to input the reinforcement item.

[0042] In one implementation, it is possible to support adding, modifying, and deleting security hardening items, as well as querying specific security hardening items. Figure 1 The security hardening items and security hardening template management modules shown are implemented, and the functions of the security hardening items and security hardening template management modules can be implemented by hardware or software in the network management system.

[0043] S304: Compare the security configuration of the second network device with the content of the reinforcement item.

[0044] The security configuration of the second network device is compared with the content of the reinforcement item to obtain a comparison result.

[0045] In an implementation manner, when the reinforcement item is a reinforcement item built into the second network device, the reinforcement item is converted into a reinforcement item command readable by the second network device through a built-in policy.

[0046] In another implementation manner, when the reinforcement item is not a reinforcement item built into the second network device, a script of the reinforcement item is called to convert the reinforcement item into a reinforcement item command readable by the second network device.

[0047] This step may specifically include the first network device sending a query command corresponding to the reinforcement item to the second network device; receiving the security configuration of the second network device fed back by the second network device; and comparing the security configuration with the policy value defined by the reinforcement item.

[0048] S306: Output the comparison result.

[0049] Through the inspection of user-defined reinforcement items, customized inspection items are realized. Through the above steps, it is possible to support user-defined inspection items while adding built-in reinforcement items. For example: to support the opening and closing of a certain port of the base station, but this inspection item is not built-in in the first network device, the network manager cannot construct a communication message system to send the opening and closing to the base station. At this time, the script of the customized inspection item can complete this conversion. For example, the security reinforcement item of a certain port of the base station = closed, the network manager converts it into a command that the base station can recognize through the script. In one implementation method, it can be converted into a message interface that the base station can recognize, such as Simple Network Management Protocol (SNMP) or Network Configuration Protocol (NETCONF). Optionally, this step can be carried out through Figure 1 The security inspection module shown is implemented, and the functions of the security inspection module can be implemented by hardware or software in the network management system.

[0050] A network security detection method provided by an embodiment of the present application can improve the overall security of the network by defining security reinforcement items to perform security reinforcement for specific scenarios and needs.

[0051] A network security detection method provided by an embodiment of the present application can perform security inspections and issue security policies on base stations based on security reinforcement templates or security reinforcement items, thereby improving the efficiency of security management.

[0052] Figure 4It is a schematic diagram of a network security detection device provided in an embodiment of the present application. The device 400 includes: a query module 410 and a determination module 420.

[0053] The query module 410 is used to query the first security configuration and the first security policy of the second network device based on the received user security request, wherein the user security request includes the information list of the second network device and the first reinforcement item set by the user. The determination module 420 is used to determine the network security detection result of the second network device based on the query of the first security policy and the first security configuration of the second network device, so as to adjust the security configuration of the second network device based on the network security detection result.

[0054] In one implementation, the query module 410 is used to send a query command for a security hardening item to the second network device in the information list; and receive a first security configuration and a first security policy of the second network device.

[0055] In one implementation, the query module 410 is used to compare the first reinforcement item with the first security policy of the second network device to obtain a comparison result; and determine the difference value in the comparison result as the network security detection result of the second network device.

[0056] In one implementation, the query module 410 is used to send a second security policy to the second network device based on a received security policy issuance request after determining the network security detection result of the second network device, wherein the security policy issuance request includes an information list of the second network device and the second reinforcement item set by the user; and receive the effectiveness result of the second security policy fed back by the second network device.

[0057] In one implementation, the query module 410 is used to query the third security policy of the second network device based on the received security policy check request after receiving the effectiveness result of the second security policy fed back by the second network device, wherein the security policy effectiveness check request includes an information list of the second network device; and receive the security policy check result, which is a comparison result of the third security policy and the second security policy.

[0058] In one implementation, the query module 410 is used to receive the reinforcement items set by the user as follows: create a reinforcement item template; wherein the reinforcement item template includes at least one of the following: the reinforcement item template identifier, the reinforcement item template name, the reinforcement item template description, and a list of reinforcement items included in the reinforcement item template; and receive the reinforcement items set by the user through the reinforcement item template.

[0059] In one implementation, the query module 410 is used to establish a correspondence between a scene and the reinforcement item template; determine the reinforcement item template corresponding to the target scene based on the target scene associated with the user and the correspondence; and receive the reinforcement item set by the user through the reinforcement item template.

[0060] In one implementation, the determination module 420 is used to, when the reinforcement item is a built-in reinforcement item of the second network device, convert the reinforcement item into a reinforcement item command readable by the second network device through a built-in policy; when the reinforcement item is not a built-in reinforcement item of the second network device, call the script of the reinforcement item to convert the reinforcement item into a reinforcement item command readable by the second network device.

[0061] In one implementation, the query module 410 is used to receive the reinforcement items set by the user through the reinforcement item operation interface provided by the first network device.

[0062] In one implementation, the reinforcement item set by the user includes at least one of the following: an identifier of the reinforcement item, a name of the reinforcement item, content of the reinforcement item, a description of a comparison result corresponding to the reinforcement item, a policy value of the reinforcement item, and a script of the reinforcement item.

[0063] The network security detection device 400 in the embodiment of the present application can be an electronic device, such as an electronic device with an operating system, or a component in an electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal, or it can be other devices other than a terminal. Exemplarily, the terminal can include but is not limited to the types of terminals listed above, and other devices can be servers, network attached storage (Network Attached Storage, NAS), etc., which are not specifically limited in the embodiment of the present application.

[0064] The network security detection device provided in the embodiment of the present application can achieve Figures 2 to 3 The various processes implemented by the method embodiment and achieving the same technical effect are not described here to avoid repetition.

[0065] The present application also provides an electronic device. The electronic device may include a terminal device or a network device, such as Figure 5 As shown, the electronic device 500 includes: a processor 501, a network interface 502 and a memory 503. The network interface 502 is, for example, a common public radio interface (CPRI).

[0066] Specifically, the electronic device 500 of the embodiment of the present invention further includes: instructions or programs stored in the memory 503 and executable on the processor 501, and the processor 501 calls the instructions or programs in the memory 503 to execute. Figures 2 to 3 The various processes implemented by the method embodiment and achieving the same technical effect are not described here to avoid repetition.

[0067] The embodiment of the present application also provides a readable storage medium on which a program or instruction is stored. When the program or instruction is executed by a processor, Figures 2 to 3 The various processes implemented by the method embodiments of the present invention and achieving the same technical effect are not described here to avoid repetition. The processor is the processor in the terminal described in the above embodiment. The readable storage medium includes a computer-readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0068] The present application also provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement Figures 2 to 3 The various processes implemented by the method embodiment and achieving the same technical effect are not described here to avoid repetition. It should be understood that the chip mentioned in the embodiment of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0069] The present application embodiment further provides a computer program / program product, wherein the computer program / program product is stored in a storage medium, and the computer program / program product is executed by at least one processor to implement the above Figures 2 to 3 The various processes implemented by the method embodiment and achieving the same technical effect are not described here to avoid repetition.

[0070] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0071] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0072] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A method for network security detection, characterized in that: The method is executed by a first network device and includes: Based on the received user security request, query the first security configuration and the first security policy of the second network device, wherein the user security request includes the information list of the second network device and the first reinforcement item set by the user; According to the query of the first security policy and the first security configuration of the second network device, a network security detection result of the second network device is determined, so that the security configuration of the second network device is adjusted based on the network security detection result.

2. The method according to claim 1, wherein querying the first security configuration and the first security policy of the second network device based on the received user security request comprises: Sending a security hardening item query command to the second network device in the information list; A first security configuration and a first security policy of the second network device are received.

3. The method according to claim 2, wherein determining the network security detection result of the second network device according to the query of the first security policy and the first security configuration of the second network device comprises: Compare the first reinforcement item with the first security policy of the second network device to obtain a comparison result; The difference value in the comparison result is determined as the network security detection result of the second network device.

4. The method according to claim 1, characterized in that After determining the network security detection result of the second network device, the method further includes: Sending a second security policy to the second network device based on the received security policy delivery request, wherein the security policy delivery request includes an information list of the second network device and a second reinforcement item set by the user; Receive the effectiveness result of the second security policy fed back by the second network device.

5. The method according to claim 4, characterized in that After receiving the effectiveness result of the second security policy fed back by the second network device, the method further includes: Based on the received security policy check request, query the third security policy of the second network device, wherein the security policy effectiveness check request includes an information list of the second network device; A security policy check result is received, where the security policy check result is a comparison result of the third security policy and the second security policy.

6. According to the method of claim 1, the method of receiving the reinforcement item set by the user is as follows: Create a reinforcement item template; where: The reinforcement item template includes at least one of the following: the reinforcement item template identifier, the reinforcement item template name, the reinforcement item template description, and a reinforcement item list included in the reinforcement item template; The reinforcement item set by the user is received through the reinforcement item template.

7. The method according to claim 6, wherein receiving the reinforcement item set by the user through the reinforcement item template comprises: Establishing a correspondence between the scenario and the reinforcement item template; Determining a reinforcement item template corresponding to the target scenario according to the target scenario associated with the user and the corresponding relationship; The reinforcement item set by the user is received through the reinforcement item template.

8. The method according to claim 1, further comprising: In the case where the reinforcement item is a reinforcement item built into the second network device, converting the reinforcement item into a reinforcement item command readable by the second network device through a built-in policy; In the case that the reinforcement item is not a reinforcement item built into the second network device, a script of the reinforcement item is called to convert the reinforcement item into a reinforcement item command readable by the second network device.

9. The method according to claim 1, further comprising: The reinforcement items set by the user are received through the reinforcement item operation interface provided by the first network device.

10. According to the method of claim 1, the reinforcement item set by the user includes at least one of the following: The identification of the reinforcement item, the name of the reinforcement item, the content of the reinforcement item, the description of the comparison result corresponding to the reinforcement item, the policy value of the reinforcement item, and the script of the reinforcement item.

11. A network side device, characterized in that: The method comprises a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the programs or instructions are executed by the processor, the steps of the network security detection method according to any one of claims 1 to 10 are implemented.

12. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, and when the program or instruction is executed by a processor, the steps of the network security detection method according to any one of claims 1 to 10 are implemented.

Images