Information display method and device, electronic equipment and storage medium

Abstract

The invention relates to an information display method and device, electronic equipment and a storage medium, and the method comprises the steps: responding to a detail display instruction of a target security protection strategy, and displaying a detail page corresponding to the target security protection strategy; displaying a security protection rule related to the target security protection strategy in the detail page; the security protection rule corresponds to a resource and is used for filtering abnormal access traffic for the resource; the essence of the method is that a scheme for helping a user to understand a specific security protection rule is provided, and the viewing requirement of the user on the security protection rule included in a specific security protection strategy is met.

Description

Technical Field

[0001] The present disclosure relates to the field of Internet technology, and in particular to an information display method, device, electronic device and storage medium. Background Art

[0002] Network security product integration refers to the integration of online WAF (Web Application Firewall) and DDoS protection products into one platform. After integration, users can quickly configure network security policies on one platform without switching accounts or platforms. After integration, the types and number of security protection policies will increase. How to help users quickly understand the configuration of security protection policies is an urgent problem to be solved. Summary of the invention

[0003] In order to solve the above technical problems or at least partially solve the above technical problems, the present disclosure provides an information display method, device, electronic device and storage medium.

[0004] In a first aspect, the present disclosure provides an information display method, comprising:

[0005] In response to a detail display instruction of a target security protection policy, display a detail page corresponding to the target security protection policy;

[0006] The security protection rules related to the target security protection policy are displayed in the details page; the security protection rules correspond to resources and are used to filter abnormal access traffic to the resources.

[0007] In a second aspect, the present disclosure further provides an information display device, comprising:

[0008] A first display module, configured to display a detail page corresponding to the target security protection policy in response to a detail display instruction of the target security protection policy;

[0009] The second display module is used to display the security protection rules related to the target security protection policy in the details page; the security protection rules correspond to resources and are used to filter abnormal access traffic to the resources.

[0010] In a third aspect, the present disclosure further provides an electronic device, the electronic device comprising:

[0011] one or more processors;

[0012] A storage device for storing one or more programs;

[0013] When the one or more programs are executed by the one or more processors, the one or more processors implement the information display method as described above.

[0014] In a fourth aspect, the present disclosure further provides a computer-readable storage medium having a computer program stored thereon, which implements the information display method as described above when executed by a processor.

[0015] Compared with the prior art, the technical solution provided by the embodiments of the present disclosure has the following advantages:

[0016] The technical solution provided by the embodiment of the present disclosure sets a detailed display instruction in response to the target security protection policy, displays the detailed page corresponding to the target security protection policy; displays the security protection rules related to the target security protection policy in the detailed page; the security protection rules correspond to the resources and are used to filter the abnormal access traffic to the resources. Its essence is to provide a solution to help users understand the specific security protection rules, and meet the user's need to view the security protection rules included in the specific security protection policy. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0018] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0019] Figure 1 A flowchart of an information display method provided in an embodiment of the present disclosure;

[0020] Figure 2-Figure 5 Schematic diagrams of display interfaces of several electronic devices provided by embodiments of the present disclosure;

[0021] Figure 6 is a structural schematic diagram of an information display device in an embodiment of the present disclosure;

[0022] Figure 7 It is a structural schematic diagram of an electronic device in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0023] In order to more clearly understand the above-mentioned objectives, features and advantages of the present disclosure, the scheme of the present disclosure will be further described below. It should be noted that the embodiments of the present disclosure and the features in the embodiments can be combined with each other without conflict.

[0024] In the following description, many specific details are set forth to facilitate a full understanding of the present disclosure, but the present disclosure may also be implemented in other ways different from those described herein; it is obvious that the embodiments in the specification are only part of the embodiments of the present disclosure, rather than all of the embodiments.

[0025] Figure 1 This is a flowchart of an information display method provided in an embodiment of the present disclosure. This embodiment can be applied to the case where information related to grid security protection is displayed in a client. The method can be executed by an information display device, which can be implemented in software and / or hardware. The device can be configured in an electronic device, such as a terminal, specifically including but not limited to smart phones, PDAs, tablet computers, wearable devices with display screens, desktop computers, laptop computers, all-in-one machines, smart home devices, etc. Alternatively, this embodiment can be applied to the case where information related to grid security protection is displayed in a server. The method can be executed by an information display device, which can be implemented in software and / or hardware. The device can be configured in an electronic device, such as a server.

[0026] like Figure 1 As shown, the method may specifically include:

[0027] S110. In response to a detail display instruction of a target security protection policy, a detail page corresponding to the target security protection policy is displayed.

[0028] For example, a security protection strategy can be a series of measures and plans formulated to protect individuals, organizations or countries from various threats and risks. Its core purpose is to prevent potential threats, reduce losses, and ensure the security of key resources and information. For example, in practice, the security protection strategy may be access control, black and white lists, regional bans, custom interception, CC protection, vulnerability protection, API protection, Bo management, destination IP blocking, black hole unblocking, linkage defense, etc. The differences between different security protection strategies are mainly reflected in the principles, objects of action, protection goals, application scenarios, etc. The security protection strategy includes one or more security protection rules. Security protection rules are specific protection measures. The security protection strategy can be regarded as a set of security protection rules obtained by aggregating security protection rules of the same type.

[0029] The target security protection policy may be, for example, a specific security protection policy specified by a user.

[0030] The target security protection policy details display instruction may be, for example, an instruction for indicating that the user wishes to understand the security protection rules included in the target security protection policy.

[0031] The details page corresponding to the target security protection policy may be, for example, a page for displaying security protection rules included in the target security protection policy.

[0032] In some scenarios, the security protection application can improve multiple security protection strategies, and these security protection strategies can be organized into a security protection tree. The security protection tree is a structure used to represent the hierarchical relationship between security protection strategies. In practice, multiple security protection strategies can be organized into a hierarchical tree structure according to the principles of the security protection strategies, the objects of action, the protection goals, and one or more different points in the application scenarios. Optionally, the security protection tree can be displayed on the page in the form of a navigation menu and / or tabs. The security protection policy tree can be composed of two or more levels of security protection strategies. The upper-level security protection strategy is the root node of the lower-level security protection strategy, representing the main functional modules in the security protection system. The lower-level security protection strategy is the leaf node of the upper-level security protection, which is a further subdivision of the functions represented by the upper-level security protection strategy.

[0033] For example, see Figure 2 , the security protection tree corresponding to the security protection system is displayed in the form of a navigation menu + tabs. Figure 2 It can be seen that the security protection tree may include a "DDoS protection" node, which may be further subdivided into "network layer protection" and "application layer protection." "Application layer protection" may be further subdivided into "CC custom protection" and "CC smart protection."

[0034] S120. Display security protection rules related to the target security protection policy on the details page; the security protection rules correspond to resources and are used to filter abnormal access traffic to the resources.

[0035] In the field of network security protection, resources can be, for example, objects that need to be protected, which can specifically be hardware devices (such as servers, network devices, storage devices), software (such as operating systems, applications, code libraries) and data (such as user data, business data, configuration data), etc. They play a vital role in the normal operation of the system, the storage and processing of data, and the development of business. Resources have corresponding domain names, and users can access resources through the domain names corresponding to the resources.

[0036] The security protection rules correspond to resources, for example, each security protection rule is used to protect the resource corresponding to it.

[0037] Displaying security protection rules related to a target security protection policy on a details page means displaying part or all of the security protection rules included in the target security protection policy on the details page.

[0038] For example, assume that the user selects CC Custom Protection under Application Protection Layer as the target security protection policy. Figure 2, showing the details page corresponding to "CC Custom Protection". In this details page, 3 security protection rules belonging to "CC Custom Protection" are shown. Among them, Rule 1 corresponds to the resources corresponding to domain name 1, and is used to filter abnormal access traffic to the resources corresponding to domain name 1. Rules 2 and 3 correspond to the resources corresponding to domain name 2, and are both used to filter abnormal access traffic to the resources corresponding to domain name 2.

[0039] In the above technical solution, by setting a detailed display instruction in response to the target security protection policy, the detailed page corresponding to the target security protection policy is displayed; the security protection rules related to the target security protection policy are displayed in the detailed page; the security protection rules correspond to the resources and are used to filter abnormal access traffic to the resources. Its essence is to provide a solution to help users understand specific security protection rules and meet the user's need to view the security protection rules included in the specific security protection policy.

[0040] In practice, users may have different concerns about the correspondence between rules and resources under different security protection strategies. Based on this, this application provides three design solutions by way of example.

[0041] The first design

[0042] Optionally, the details page includes multiple rule display areas; S120 may include: displaying security protection rules in the rule display area of ​​the details page, so that the security protection rules displayed in the same rule display area correspond to the same resource, and the security protection rules displayed in different rule display areas correspond to different resources.

[0043] Exemplarily, referring to 2, the details page includes two rule display areas, namely rule display area 1 and rule display area 2. The two rule display areas are arranged vertically. Among them, rule display area 1 corresponds to domain name 1, and rule display area 2 corresponds to domain name 2. Since security protection rule 1 corresponds to the resources corresponding to domain name 1. The display position of security protection rule 1 is located in rule display area 1. Security protection rule 2 and security protection rule 3 correspond to the resources corresponding to domain name 2. The display position of security protection rule 2 and the display position of security protection rule 3 are both located in rule display area 2. In this way, each security protection rule displayed in the same rule display area corresponds to the same resource, and the security protection rules displayed in different rule display areas correspond to different resources.

[0044] This setting displays all security protection rules corresponding to the same resource in the same rule display area on the details page. It sorts out the security protection rules from the perspective of the corresponding relationship with the resources, making the corresponding relationship between the security protection rules and resources clearer.

[0045] The second design

[0046] Optionally, S120 may include: in response to an instruction to select a target resource, displaying security protection rules corresponding to the target resource and related to the target security protection policy in a detail page.

[0047] The target resource is a resource selected by the user or a default resource.

[0048] For example, see Figure 2 If the user selects the "Vulnerability Protection" option in the navigation bar on the left side of the page, and takes "Vulnerability Protection" as the target security protection policy, the detailed display instructions of the target security protection policy are generated. The default resource is taken as the target resource, and the selection instructions for the target resource are generated. The main content display area on the right side of the page is updated. See Figure 3 , after the update, a domain name input box is displayed in the main content display area. The domain name input box is automatically filled with the domain name of the default resource, and the security protection rules corresponding to the default resource and belonging to "Vulnerability Protection" are displayed below the domain name input box. If the user enters other domain names in the domain name input box on this page, the resource pointed to by the domain name entered by the user is used as the target resource, and a selection instruction for the target resource is generated. The security protection rules corresponding to "Vulnerability Protection" and used to filter abnormal access traffic to the target resource are displayed on this page.

[0049] The essence of this setting is that when displaying security protection rules, only the security protection rules corresponding to the target resource are displayed, and the security protection rules corresponding to other resources (non-target resources) are not displayed. This can help users more clearly understand which security protection rules are configured for the target resource. This is especially suitable for situations where the number of resources that the security protection system is responsible for is large.

[0050] The third design

[0051] Optionally, S120 may further include: displaying all security protection rules under the target security protection policy in the same area of ​​the details page in a preset order. Optionally, the preset rules may be, for example, an ascending order of the last update time of the security protection rules, an ascending and descending order of the last update time of the security protection rules, an order of the priority of the security protection rules from low to high, an order of the priority of the security protection rules from high to low, etc.

[0052] For example, see Figure 4 In this detail page, all security protection rules are arranged in order of priority from low to high and displayed in the same area. The purpose of this setting is not to emphasize the correspondence between security protection rules and resources.

[0053] On the basis of the above-mentioned technical solutions, optionally, the method may also include: displaying protection event information and / or effectiveness status information related to the target security protection strategy in the details page of the target security protection strategy.

[0054] The protection event information related to the target security protection strategy may be, for example, the abnormal access traffic filtered by the target security protection strategy during the use of the target security protection strategy in the historical period, such as which security protection rules in the target security protection strategy have successfully filtered abnormal access traffic, the number of filtering times, the number of manual verification times after filtering, the number of interceptions after filtering, the number of alarm messages issued after filtering, the number of security protection rules that have successfully filtered abnormal access traffic, etc. The protection event information related to the target security protection strategy can be used to determine the quality of the protection performance of the target security protection strategy.

[0055] The effectiveness information of the target security protection policy may be used to indicate, for example, whether all security protection rules included in the target security protection policy are fully enabled, partially enabled, or not enabled for the target resource. Alternatively, the effectiveness information of the target security protection policy may be used to indicate, for example, whether all security protection rules included in the target security protection policy are fully enabled, partially enabled, or not enabled for all resources.

[0056] With the help of the policy status identifier corresponding to the security protection policy, users can quickly understand whether the security protection policy is effective and whether the security protection rules it includes are playing a protective role.

[0057] On the basis of the above-mentioned technical solutions, optionally, in response to an instruction to select a target resource and a selection operation on identification information of a target security protection policy in a details page, a filtering link page is displayed; the filtering link page includes a filtering link for access traffic to the target resource; the filtering link includes a plurality of security protection policies arranged in sequence according to a preset order; in the filtering link, the target security protection policy is displayed in a highlighted state.

[0058] In actual applications, in order to effectively filter abnormal access traffic to resources, a filtering link can be set for the access traffic to resources. The filtering link is composed of multiple security protection policies arranged in a certain order. When the access traffic to the resource arrives, it is detected by each effective security protection policy in the filtering link in turn to achieve multi-dimensional and multi-angle filtering of abnormal access traffic and improve the filtering effect. In practice, the filtering links for different resources may be different. The difference can be specifically manifested in at least one of the following: the arrangement order of the security protection policies is different, the included security protection policies are different, and the security protection rules included in the effective security protection policies are different.

[0059] The filtering link page may be, for example, a page for displaying filtering links for access traffic to a target resource.

[0060] The identification information of the target security protection policy is displayed in the details page, which is used to indicate which security protection policy the details page is for.

[0061] The selection operation on the identification information of the target security protection policy may be, for example, an operation indicating that the user wishes to view the location of the target security protection policy in the filtering link of the target resource. Specifically, it may be a click operation, a slide operation, or a hover operation on the identification information of the target security protection policy.

[0062] The highlight state display may, for example, highlight the target security protection strategy's logo in a special form, making the target security protection strategy's logo more conspicuous and easy to identify. Specifically, the target security protection strategy is displayed in a highlight state, which may, for example, refer to setting one or more of the text color, text stroke thickness, text font, text underline style, background color, and border color in the logo of the target security protection strategy so that it is different from the corresponding item in the logo of the non-target security protection strategy.

[0063] For example, see Figure 3 , this page is the details page of "Vulnerability Protection". Since the user enters the domain name in the domain name input box, the resource pointed to by the domain name entered by the user is determined as the target resource, and an instruction to select the target resource is generated. The details page includes the identification information of the target security protection policy. The identification information is used to indicate which security protection policy the details page is for. If the user hovers the mouse over the identification information of the target security protection policy (equivalent to the selection operation of the identification information of the target security protection policy), see Figure 5 , showing the filtering link page. The filtering link page shows the filtering link for the access traffic of the target resource. Since the filtering link page is displayed by operating the identification information of "Vulnerability Protection", "Vulnerability Protection" is displayed in a highlighted state in the filtering link page.

[0064] By setting up a response to the selection instruction of the target resource and the selection operation of the identification information of the target security protection policy in the details page, the filtering link page is displayed. Its essence is to provide a path from a certain target security protection policy directly to the filtering link page of the target resource, so as to meet the user's desire to quickly understand the filtering link of the access traffic to the target resource.

[0065] Furthermore, after displaying the filtering link page, the method may further include: in response to a selection operation of the first security protection policy in the filtering link page, displaying a detail page corresponding to the first security protection policy.

[0066] The first security protection strategy may be, for example, a specific security protection strategy selected from the security protection strategies displayed on the filtering link page, which may be the target security protection strategy mentioned above, or may not be the security protection strategy mentioned above.

[0067] For example, see Figure 5 If the user clicks on the "Banned Access List" on the filtering link page, the "Banned Access List" will be used as the first security protection strategy. Figure 4 , display the details page of "Banned List".

[0068] Furthermore, a policy status identifier corresponding to the security protection policy is displayed in the filtering link page; the policy status identifier is used to indicate whether the corresponding security protection policy is enabled for the target resource and / or the quality of the protection performance.

[0069] For example, see Figure 5 In this filtering link page, each security protection policy has a corresponding policy status indicator in front of it. Figure 5 It can be found that there are three forms of policy status identification. These three forms of policy status identification. Among them, a circle filled with black means that the security protection policy is enabled (that is, it has taken effect) for the target resource. An unfilled circle means that the security protection policy is not enabled (that is, it has not taken effect) for the target resource. A circle filled with gray means that the security protection policy is enabled for the target resource, but the protection performance is poor. It should be noted here that the poor protection performance of the security protection policy means that the various security protection rules included in the security protection policy do not work well together, and there may be loopholes or inconsistencies.

[0070] Based on the above technical solution, optionally, the details page can also include configuration items related to security protection rules; the method also includes: in response to the configuration operation of the configuration item, executing at least one of the following steps: adjusting the correspondence between security protection rules and resources, modifying security protection rules, deleting security protection rules, adjusting the usage status of security protection rules, and adding new security protection rules.

[0071] For example, see Figure 2In the details page, there is an "Add Rule" option. The "Add Rule" option is a security protection rule adding option, which is a configuration item related to security protection rules. If the user selects the security protection rule adding option, a new security protection rule can be added. Figure 2 In the details page, each security protection rule has corresponding editing options, deleting options, and switching options. Users can modify the security protection rule by selecting the editing option; delete the security protection rule by selecting the deleting option; and adjust the usage status of the security protection rule by selecting the switching option to adjust whether the security protection rule participates in the security protection work of the corresponding resources. Figure 4 and Figure 5 The details page also includes the switch options corresponding to the security protection policy. When the user adjusts the switch status of the switch option corresponding to the security protection policy, the usage status of all security protection rules included in the security protection policy will be adjusted synchronously.

[0072] See also Figure 3 The details page includes identification information of multiple security protection rule sets, such as "Basic", "Moderate", "Comprehensive" and "Custom". The number of security protection rules and / or security protection rules in different security protection rule sets are different. The user can make the target resource correspond to the security protection rules included in the selected security protection rule set by selecting the identification information of the security protection rule set. In this way, when the user selects a different security protection rule set, it means adjusting the correspondence between the security protection rules and the resources.

[0073] The essence of this setting is to allow users to adjust the relevant information of the security protection rules on the details page, so that the security protection rules can better protect resources and improve the filtering effect of abnormal access traffic.

[0074] It should be noted that, for the above-mentioned method embodiments, for the sake of simplicity, they are all described as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence, because according to the present invention, certain steps can be performed in other sequences or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

[0075] Figure 6 Schematic diagram of the structure of an information display device in the embodiment of the present disclosure. The information display device provided in the embodiment of the present disclosure can be configured in the client, or can be configured in the server. Figure 6, the information display device specifically includes:

[0076] A first display module 310 is used to display a detail page corresponding to the target security protection policy in response to a detail display instruction of the target security protection policy;

[0077] The second display module 320 is used to display the security protection rules related to the target security protection policy in the details page; the security protection rules correspond to resources and are used to filter abnormal access traffic to the resources.

[0078] Furthermore, the second display module 320 is used to:

[0079] In response to an instruction to select a target resource, security protection rules corresponding to the target resource and related to the target security protection policy are displayed in the detail page.

[0080] Furthermore, the details page includes identification information of the target security protection strategy; the device also includes a third display module, which is used to:

[0081] In response to an instruction to select a target resource and a selection operation on the identification information of the target security protection policy in the details page, a filtering link page is displayed; the filtering link page includes a filtering link for access traffic to the target resource; the filtering link includes multiple security protection policies arranged in sequence according to a preset order; in the filtering link, the target security protection policy is displayed in a highlighted state.

[0082] Furthermore, the first display module is also used for:

[0083] After the filtering link page is displayed, in response to a selection operation of the first security protection policy in the filtering link page, a detail page corresponding to the first security protection policy is displayed.

[0084] Furthermore, the third display module is used to:

[0085] The policy status identifier corresponding to the security protection policy is displayed in the filtering link page; the policy status identifier is used to indicate whether the security protection policy corresponding to the target resource is in an enabled state and / or the quality of the protection performance.

[0086] Furthermore, the details page includes a plurality of rule display areas; a second display module 320, which is used to:

[0087] The security protection rules are displayed in the rule display area of ​​the details page, so that the security protection rules displayed in the same rule display area correspond to the same resource, and the security protection rules displayed in different rule display areas correspond to different resources.

[0088] Furthermore, the second display module 320 is used to:

[0089] The details page of the target security protection policy also displays protection event information and / or effectiveness information related to the target security protection policy.

[0090] Furthermore, the details page also includes configuration items related to the security protection rules; the device also includes an adjustment module, which is used to:

[0091] In response to the configuration operation on the configuration item, at least one of the following steps is performed: adjusting the correspondence between the security protection rule and the resource, modifying the security protection rule, deleting the security protection rule, adjusting the use status of the security protection rule, and adding a new security protection rule.

[0092] The information display device provided in the embodiment of the present disclosure can execute the steps executed by the client or server in the information display method provided in the embodiment of the method of the present disclosure, and has execution steps and beneficial effects, which will not be repeated here.

[0093] Figure 7 Schematic diagram of the structure of an electronic device in the embodiment of the present disclosure. Figure 7 , which shows a schematic diagram of the structure of an electronic device 1000 suitable for implementing the embodiment of the present disclosure. The electronic device 1000 in the embodiment of the present disclosure may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle terminals (such as vehicle navigation terminals), wearable electronic devices, etc., and fixed terminals such as digital TVs, desktop computers, smart home devices, etc. Figure 7 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0094] like Figure 7As shown, the electronic device 1000 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 1001, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage device 1008 to a random access memory (RAM) 1003 to implement the information display method of the embodiment described in the present disclosure. In the RAM 1003, various programs and information required for the operation of the electronic device 1000 are also stored. The processing device 1001, the ROM 1002, and the RAM 1003 are connected to each other via a bus 1004. An input / output (I / O) interface 1005 is also connected to the bus 1004.

[0095] Typically, the following devices may be connected to the I / O interface 1005: an input device 1006 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 1007 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 1008 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 may allow the electronic device 1000 to communicate with other devices wirelessly or by wire to exchange information. Although Figure 7 The electronic device 1000 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead.

[0096] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart, thereby implementing the information display method as described above. In such an embodiment, the computer program can be downloaded and installed from the network through the communication device 1009, or installed from the storage device 1008, or installed from the ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment of the present disclosure are executed.

[0097] It should be noted that the computer-readable medium disclosed above may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include an information signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated information signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0098] In some embodiments, the client and the server may communicate using any known or future developed network protocol such as HTTP (HyperText Transfer Protocol), and may be interconnected with any form or medium of digital information communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any known or future developed network.

[0099] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0100] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device:

[0101] In response to a detail display instruction of a target security protection policy, display a detail page corresponding to the target security protection policy;

[0102] The security protection rules related to the target security protection policy are displayed in the details page; the security protection rules correspond to resources and are used to filter abnormal access traffic to the resources.

[0103] Optionally, when the above one or more programs are executed by the electronic device, the electronic device may also execute other steps described in the above embodiments.

[0104] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including, but not limited to, object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0105] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0106] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware, wherein the name of a unit does not, in some cases, limit the unit itself.

[0107] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0108] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0109] According to one or more embodiments of the present disclosure, the present disclosure provides an electronic device, including:

[0110] one or more processors;

[0111] A memory for storing one or more programs;

[0112] When the one or more programs are executed by the one or more processors, the one or more processors implement any information display method provided in the present disclosure.

[0113] According to one or more embodiments of the present disclosure, the present disclosure provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements any information display method provided by the present disclosure.

[0114] The embodiments of the present disclosure further provide a computer program product, which includes a computer program or instructions. When the computer program or instructions are executed by a processor, the information display method described above is implemented.

[0115] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0116] The above description is only a specific embodiment of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. An information display method, characterized in that: include: In response to a detail display instruction of a target security protection policy, display a detail page corresponding to the target security protection policy; The security protection rules related to the target security protection policy are displayed in the details page; the security protection rules correspond to resources and are used to filter abnormal access traffic to the resources.

2. The method according to claim 1, characterized in that The security protection rules related to the target security protection strategy are displayed on the details page, including: In response to an instruction to select a target resource, security protection rules corresponding to the target resource and related to the target security protection policy are displayed in the detail page.

3. The method according to claim 1, characterized in that The details page includes identification information of the target security protection strategy; the method further includes: In response to an instruction to select a target resource and a selection operation on the identification information of the target security protection policy in the details page, a filtering link page is displayed; the filtering link page includes a filtering link for access traffic to the target resource; the filtering link includes multiple security protection policies arranged in sequence according to a preset order; in the filtering link, the target security protection policy is displayed in a highlighted state.

4. The method according to claim 3, characterized in that: After displaying the filtering link page, the method further includes: In response to a selection operation on the first security protection policy in the filtering link page, a detail page corresponding to the first security protection policy is displayed.

5. The method according to claim 3, characterized in that: Also includes: Displaying a policy status identifier corresponding to the security protection policy in the filtering link page; The policy status identifier is used to indicate whether the security protection policy corresponding to the target resource is in an enabled state and / or the quality of the protection performance.

6. The method according to claim 1, characterized in that The details page includes a plurality of rule display areas; the security protection rules related to the target security protection strategy displayed in the details page include: The security protection rules are displayed in the rule display area of ​​the details page, so that the security protection rules displayed in the same rule display area correspond to the same resource, and the security protection rules displayed in different rule display areas correspond to different resources.

7. The method according to claim 1, characterized in that Also includes: The details page of the target security protection policy also displays protection event information and / or effectiveness information related to the target security protection policy.

8. The method according to claim 1, characterized in that The details page also includes configuration items related to the security protection rules; the method also includes: In response to the configuration operation on the configuration item, at least one of the following steps is performed: adjusting the correspondence between the security protection rule and the resource, modifying the security protection rule, deleting the security protection rule, adjusting the use status of the security protection rule, and adding a new security protection rule.

9. An information display device, characterized in that: include: A first display module, configured to display a detail page corresponding to the target security protection policy in response to a detail display instruction of the target security protection policy; The second display module is used to display the security protection rules related to the target security protection policy in the details page; the security protection rules correspond to resources and are used to filter abnormal access traffic to the resources.

10. An electronic device, characterized in that: The electronic device comprises: one or more processors; A storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 8.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 8 is implemented.

Images