Network security system detection device and use method thereof

Abstract

The invention discloses a network security system detection device and a use method thereof.The network security system detection device comprises a protection assembly, the protection assembly comprises a shell, a cover plate and a supporting plate, one end of the supporting plate is fixedly connected with the cover plate, the shell comprises a top plate, side plates, a back plate, a bottom plate and a limiting plate, the side plates are fixed to the two sides of the bottom of the top plate, and the limiting plate is fixed to the back plate; the back plate is fixed to the rear end of the bottom of the top plate, the bottom plate is fixedly connected with the ends, away from the top plate, of the side plates, and the limiting plate is located above the bottom plate and fixedly connected with the side plates. Through the arrangement of the shell, the cover plate and the supporting plate, the effect of providing protection for the detection mainboard is achieved, disassembly and assembly can be facilitated through modular design, so that maintenance of the detection mainboard is facilitated, the shell is integrally machined through metal plates, disassembly and assembly are convenient and rapid, high use strength and heat dissipation performance are achieved, and the service life of the detection mainboard is prolonged. Therefore, internal equipment can be effectively protected.

Description

Technical Field

[0001] The present invention relates to the technical field of network security system detectors, and in particular to a network security system detection device and a use method thereof. Background Art

[0002] Network security detection devices refer to a type of equipment used to detect and evaluate the security of network systems. Through security assessment and detection of network systems, potential security risks and loopholes can be discovered, so that corresponding protective measures can be taken to ensure the security and stability of network systems. With the development of network technology and changes in network security threats, these detection methods are also constantly updated and upgraded. Network administrators need to select appropriate network security detection methods according to actual conditions, and continuously strengthen the management and maintenance of network security to ensure the security and stability of the network environment;

[0003] According to the Chinese patent application No.: 202322590136.X, a network security detection device is disclosed, including a shell and a detection device body, the detection device body is installed inside the shell, an inspection panel is installed at the bottom of the shell, a plurality of mounting grooves are provided on one side of the shell, and cooling fans are installed inside the plurality of mounting grooves, a plurality of connecting ports are provided on one side of the detection device body, and the connecting ports pass through one side of the shell, and a pair of slide grooves 1 and 2 are respectively provided at the upper and lower ends of the shell on both sides of the plurality of connecting ports, a pair of slide grooves 1 are respectively slidably connected with sliders 1 inside, a pair of sliders 1 are fixedly connected with movable plates 1 between them, and a pair of slide grooves 2 are respectively slidably connected with sliders 2 inside, and through the coordinated use of movable plates 1, movable plates 2 and semicircular grooves, the semicircular grooves on movable plates 1 and movable plates 2 can tightly clamp the connecting wires to prevent the connecting wires from falling from the connecting ports during use, thereby affecting the normal use of the detection device body;

[0004] The prior art effectively solves the problem that when a network security detection device is in use, it is necessary to connect multiple connecting wires to the detection device so that the detected subject can be detected, but the connecting wires are easily dropped from the connection port during use, resulting in the network security detection device being unable to be used normally. The prior art has the advantage of being able to prevent the connecting wires from dropping from the connection port during use, thereby affecting the normal use of the detection device. The outer shell of the network security detection device is usually composed of a top cover and an installation box body, and the detection main board is installed inside the box body. Due to the limited space inside the box body and the influence of the side panel of the box body, it is inconvenient to install the detection main board, especially when performing wiring and welding operations. The impact is more serious. Summary of the invention

[0005] The purpose of the present invention is to provide a network security system detection device and a method of using the same, which has the advantage of convenient installation of a detection mainboard and solves the problem of inconvenience in installing the detection mainboard due to limited internal space of the box body and the influence of the side panels of the box body.

[0006] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: a network security system detection device, comprising a protection component, the protection component comprising an outer shell, a cover plate and a support plate, one end of the support plate is fixedly connected to the cover plate, the outer shell comprises a top plate, a side plate, a back plate, a bottom plate and a limit plate, the side plates are fixed to both sides of the bottom of the top plate, the back plate is fixed to the rear end of the bottom of the top plate, the bottom plate is fixedly connected to one end of the side plate away from the top plate, the limit plate is located above the bottom plate and fixedly connected to the side plate, a slide groove is formed between the bottom plate and the limit plate, one end of the support plate away from the cover plate extends to the inner cavity of the slide groove, and is slidably connected to the inner cavity of the slide groove, the cover plate contacts the front ends of the top plate and the side plate, and a detection mainboard is installed on the top of the support plate, and the detection mainboard is used to detect network security.

[0007] Preferably, the support plate is bolted to the base plate via bolts, and the cover plate is threadedly connected to the side plate via bolts.

[0008] Preferably, ventilation holes are provided on the surface of the side panels, ventilation slots are provided on the surface of the back panel, a fan is installed on one side of the back panel surface, and the ventilation holes, fan and ventilation slots are used for ventilation and heat dissipation.

[0009] Preferably, a power port is installed on the other side of the back panel surface, and a wiring port and an indicator light are installed on the surface of the cover plate.

[0010] Preferably, the detection main board includes a main control chip, a power module, a communication module, a data acquisition module, a data processing module, an analysis engine module, an alarm information module and a data storage module, and the main control chip, power module, communication module, data acquisition module, data processing module, analysis engine module, alarm information module and data storage module are all integrated on the PCB.

[0011] Preferably, the power module is connected to the power port, the wiring port is connected to the communication module, the alarm information module is connected to the cover plate, and the power module, communication module, data acquisition module, data processing module, analysis engine module, alarm information module and data storage module are all connected to the main control chip.

[0012] Preferably, the method of use comprises the following steps:

[0013] S1. First, the top plate, side plate, back plate and bottom plate are integrally formed by sheet metal, the limit plate is fixed to the side plate by welding, the cover plate is fixed to the support plate by welding, the detection main board is fixed to the top of the support plate by bolts, and after the wiring connection of the detection main board is completed, one end of the support plate is pushed into the slide groove formed by the bottom plate and the limit plate, so that it enters the inner cavity of the shell through the slide groove, and then the cover plate is fixed to the side plate by bolts, and the support plate is fixed to the bottom plate by bolts, so as to complete the assembly;

[0014] S2. During use, the heat emitted by the mainboard is discharged through the fan. The ventilation holes and ventilation slots can deliver fresh air to the inner cavity of the shell, thereby ensuring the circulation of internal air. The power port is used to connect the external power supply, the wiring port is used to connect the output / input connector, and the indicator light is used for working indication. It is green when working normally, and it is red when the network is detected to be abnormal.

[0015] S3. The output / input interface of the intranet / extranet is connected through the wiring port so that the detection mainboard can detect the network. The data acquisition module is responsible for capturing data packets from the network, including network traffic and device logs. The data processing module parses, filters and preliminarily analyzes the captured data. The analysis engine module performs in-depth analysis on the processed data to identify potential security threats. The main control chip is used to summarize and process the information obtained and detected. The power module provides power by cooperating with the power port. When a security threat is detected, the alarm information module generates alarm information and triggers corresponding response measures, which are displayed as red lights through indicator lights. The data storage module stores and manages the detected data and alarm information for subsequent query and analysis.

[0016] Compared with the prior art, the present invention has the following beneficial effects:

[0017] The present invention provides protection for the detection mainboard by arranging the outer shell, the cover plate and the support plate. The modular design allows for convenient disassembly and assembly, thereby facilitating maintenance of the detection mainboard. The outer shell is processed by integrated sheet metal, which is not only convenient for quick disassembly and installation, but also has high strength of use and heat dissipation, thereby effectively providing protection for internal equipment. The detection mainboard is arranged to achieve the effect of real-time detection of network conditions, thereby being able to promptly detect whether the network is abnormal, ensuring the security of network operation, and ensuring the security and stability of the network environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 It is a schematic diagram of the main structure of the present invention;

[0019] Figure 2 It is a bottom view structural schematic diagram of the present invention;

[0020] Figure 3It is a schematic structural diagram of the housing, the cover plate and the support plate in a separated state according to the present invention;

[0021] Figure 4 It is a schematic diagram of the system flow structure of the present invention.

[0022] In the figure: 1. Protection component; 11. Shell; 111. Top plate; 112. Side plate; 113. Back plate; 114. Bottom plate; 115. Limit plate; 12. Cover plate; 13. Support plate; 14. Wiring port; 15. Indicator light; 16. Ventilation hole; 17. Fan; 18. Ventilation slot; 19. Power port; 2. Detection main board; 201. Main control chip; 202. Power module; 203. Communication module; 204. Data acquisition module; 205. Data processing module; 206. Analysis engine module; 207. Alarm information module; 208. Data storage module. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] Example 1

[0025] like Figure 1-4 As shown, it is the first embodiment of the present invention, which provides a network security system detection device, including a protection component 1, the protection component 1 includes a shell 11, a cover plate 12 and a support plate 13, one end of the support plate 13 is fixedly connected to the cover plate 12, the shell 11 includes a top plate 111, a side plate 112, a back plate 113, a bottom plate 114 and a limit plate 115, the side plates 112 are fixed to both sides of the bottom of the top plate 111, the back plate 113 is fixed to the rear end of the bottom of the top plate 111, and the bottom plate 114 is fixedly connected to one end of the side plate 112 away from the top plate 111, the limit plate 115 is located above the bottom plate 114 and is fixedly connected to the side plate 112, a slide groove is formed between the bottom plate 114 and the limit plate 115, the end of the support plate 13 away from the cover plate 12 extends to the inner cavity of the slide groove and is slidably connected to the inner cavity of the slide groove, the cover plate 12 contacts with the front ends of the top plate 111 and the side plate 112, and a detection mainboard 2 is installed on the top of the support plate 13, and the detection mainboard 2 is used to detect network security.

[0026] like Figure 1-4As shown, the top plate 111, the side plate 112, the back plate 113 and the bottom plate 114 are integrally formed by sheet metal, the limit plate 115 is fixed to the side plate 112 by welding, the cover plate 12 and the support plate 13 are fixed by welding, the detection main board 2 is fixed to the top of the support plate 13 by bolts, and after the wiring connection of the detection main board 2 is completed, one end of the support plate 13 is pushed into the slide groove formed by the bottom plate 114 and the limit plate 115, so that it enters the inner cavity of the shell 11 through the slide groove, and then the cover plate 12 and the side plate 112 are fixed by bolts, and the support plate 13 is fixed to the bottom plate 114 by bolts, so that the assembly is completed.

[0027] Example 2

[0028] Reference Figure 1-3 , which is the second embodiment of the present invention, and this embodiment is based on the previous embodiment.

[0029] In this embodiment, the support plate 13 is bolted to the bottom plate 114 through bolts, and the cover plate 12 is threadedly connected to the side plate 112 through bolts.

[0030] The surface of the side plate 112 is provided with ventilation holes 16, the surface of the back plate 113 is provided with ventilation slots 18, and a fan 17 is installed on one side of the surface of the back plate 113. The ventilation holes 16, the fan 17 and the ventilation slots 18 are used for ventilation and heat dissipation.

[0031] A power port 19 is installed on the other side of the surface of the back plate 113 , and a wiring port 14 and an indicator light 15 are installed on the surface of the cover plate 12 .

[0032] like Figure 1-3 As shown, during use, the heat emitted by the detection mainboard 2 is discharged through the fan 17, and the ventilation holes 16 and the ventilation slots 18 can transport fresh air to the inner cavity of the shell 11, so as to ensure the circulation of internal air. The power port 19 is used to connect an external power supply, the wiring port 14 is used to connect the output / input connector, and the indicator light 15 is used for working indication. It is green when working normally and turns red when a network abnormality is detected.

[0033] Example 3

[0034] Reference Figure 3 and 4 , which is the third embodiment of the present invention, and this embodiment is based on the previous two embodiments.

[0035] In this embodiment, the detection main board 2 includes a main control chip 201, a power module 202, a communication module 203, a data acquisition module 204, a data processing module 205, an analysis engine module 206, an alarm information module 207 and a data storage module 208. The main control chip 201, the power module 202, the communication module 203, the data acquisition module 204, the data processing module 205, the analysis engine module 206, the alarm information module 207 and the data storage module 208 are all integrated on the PCB.

[0036] The power module 202 is connected to the power port 19, the wiring port 14 is connected to the communication module 203, the alarm information module 207 is connected to the cover plate 12, and the power module 202, the communication module 203, the data acquisition module 204, the data processing module 205, the analysis engine module 206, the alarm information module 207 and the data storage module 208 are all connected to the main control chip 201.

[0037] like Figure 3 and 4 As shown, the output / input interface of the intranet / extranet is connected through the wiring port 14, so that the detection mainboard 2 can detect the network. The data acquisition module 204 is responsible for capturing data packets from the network, including network traffic and device logs. NIC or Tap can be used to capture data. The data processing module 205 parses, filters and preliminarily analyzes the captured data. Efficient parsing algorithms and data filtering technologies such as regular expressions and protocol parsing libraries can be used. The analysis engine module 206 performs in-depth analysis on the processed data to identify potential security threats. Machine learning, behavior analysis, and signature matching can be used. The main control chip 201 is used to summarize and process the information obtained and detected. Vir The FPGA chip of model tex-7690T, the power module 202 provides power by cooperating with the power port 19, and the alarm information module 207 generates alarm information and triggers corresponding response measures when a security threat is detected. The event-driven model and automated scripts can be used to achieve rapid response, and the red light is displayed through the indicator light 15. The data storage module 208 stores and manages the detected data and alarm information for subsequent query and analysis, using a relational database such as MySQL or a NoSQL database such as MongoDB. The communication module 203 uses standard communication protocols such as HTTP, SNMP and encryption technologies such as SSL / TLS to ensure the security of communication.

[0038] A method for using a network security system detection device, the method comprising the following steps:

[0039] S1. First, the top plate 111, the side plate 112, the back plate 113 and the bottom plate 114 are integrally formed by sheet metal, the limit plate 115 is fixed to the side plate 112 by welding, the cover plate 12 is fixed to the support plate 13 by welding, the detection main board 2 is fixed to the top of the support plate 13 by bolts, and after the wiring connection of the detection main board 2 is completed, one end of the support plate 13 is pushed into the slide groove formed by the bottom plate 114 and the limit plate 115, so that it enters the inner cavity of the shell 11 through the slide groove, and then the cover plate 12 is fixed to the side plate 112 by bolts, and the support plate 13 is fixed to the bottom plate 114 by bolts, so that the assembly can be completed;

[0040] S2. During use, the heat emitted by the mainboard 2 is discharged through the fan 17. The ventilation holes 16 and the ventilation slots 18 can deliver fresh air to the inner cavity of the housing 11, thereby ensuring the circulation of the internal air. The power port 19 is used to connect an external power supply, the wiring port 14 is used to connect the output / input connector, and the indicator light 15 is used for working indication. It is green when working normally, and it is red when a network abnormality is detected;

[0041] S3. The output / input interface of the intranet / extranet is connected through the wiring port 14, so that the detection mainboard 2 can detect the network. The data acquisition module 204 is responsible for capturing data packets from the network, including network traffic and device logs. The data processing module 205 parses, filters and preliminarily analyzes the captured data. The analysis engine module 206 performs in-depth analysis on the processed data to identify potential security threats. The main control chip 201 is used to summarize and process the information obtained and detected. The power module 202 provides power by cooperating with the power port 19. When a security threat is detected, the alarm information module 207 generates alarm information and triggers corresponding response measures, and displays a red light through the indicator light 15. The data storage module 208 stores and manages the detected data and alarm information for subsequent query and analysis.

[0042] The standard parts used in this application document can all be purchased from the market and can be customized according to the description in the specification and drawings. The specific connection methods of each part adopt conventional means such as mature bolts, rivets, welding, etc. in the prior art. The machinery, parts and equipment all adopt conventional models in the prior art. The control method is automatic control through a controller. The control circuit of the controller can be implemented through simple programming by technicians in this field, which is common knowledge in the field. This application is mainly used to protect mechanical devices, so this application no longer explains the control method and circuit connection in detail.

[0043] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0044] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A network security system detection device, comprising a protection component (1), characterized in that: The protective component (1) comprises a shell (11), a cover plate (12) and a support plate (13); one end of the support plate (13) is fixedly connected to the cover plate (12); the shell (11) comprises a top plate (111), a side plate (112), a back plate (113), a bottom plate (114) and a limit plate (115); the side plates (112) are fixed to both sides of the bottom of the top plate (111); the back plate (113) is fixed to the rear end of the bottom of the top plate (111); the bottom plate (114) and the side plates (112) are away from the top plate (111). ), the limiting plate (115) is located above the bottom plate (114) and is fixedly connected to the side plate (112); a slide groove is formed between the bottom plate (114) and the limiting plate (115); one end of the support plate (13) away from the cover plate (12) extends to the inner cavity of the slide groove and is slidably connected to the inner cavity of the slide groove; the cover plate (12) contacts the front ends of the top plate (111) and the side plate (112); a detection mainboard (2) is installed on the top of the support plate (13); the detection mainboard (2) is used to detect network security.

2. A network security system detection device according to claim 1, characterized in that: The support plate (13) is bolted to the bottom plate (114) via bolts, and the cover plate (12) is threadedly connected to the side plate (112) via bolts.

3. A network security system detection device according to claim 1, characterized in that: The surface of the side plate (112) is provided with ventilation holes (16), the surface of the back plate (113) is provided with ventilation slots (18), and a fan (17) is installed on one side of the surface of the back plate (113). The ventilation holes (16), the fan (17) and the ventilation slots (18) are used for ventilation and heat dissipation.

4. A network security system detection device according to claim 1, characterized in that: A power port (19) is installed on the other side of the surface of the back plate (113), and a wiring port (14) and an indicator light (15) are installed on the surface of the cover plate (12).

5. A network security system detection device according to claim 4, characterized in that: The detection mainboard (2) comprises a main control chip (201), a power module (202), a communication module (203), a data acquisition module (204), a data processing module (205), an analysis engine module (206), an alarm information module (207) and a data storage module (208); the main control chip (201), the power module (202), the communication module (203), the data acquisition module (204), the data processing module (205), the analysis engine module (206), the alarm information module (207) and the data storage module (208) are all integrated on a PCB.

6. A network security system detection device according to claim 5, characterized in that: The power module (202) is connected to the power port (19), the wiring port (14) is connected to the communication module (203), the alarm information module (207) is connected to the cover plate (12), and the power module (202), the communication module (203), the data acquisition module (204), the data processing module (205), the analysis engine module (206), the alarm information module (207) and the data storage module (208) are all connected to the main control chip (201).

7. A method for using a network security system detection device according to any one of claims 1 to 6, characterized in that: The method of use includes the following steps: S1. First, the top plate (111), the side plate (112), the back plate (113) and the bottom plate (114) are integrally formed by sheet metal, the limit plate (115) is fixed to the side plate (112) by welding, the cover plate (12) and the support plate (13) are fixed by welding, the detection main board (2) is fixed to the top of the support plate (13) by bolts, and after the wiring connection of the detection main board (2) is completed, one end of the support plate (13) is pushed into the slide groove formed by the bottom plate (114) and the limit plate (115), so that it enters the inner cavity of the shell (11) through the slide groove, and then the cover plate (12) and the side plate (112) are fixed by bolts, and the support plate (13) is fixed to the bottom plate (114) by bolts, so that the assembly is completed; S2. During use, the heat emitted by the mainboard (2) is discharged through the fan (17). The ventilation holes (16) and the ventilation slots (18) can deliver fresh air to the inner cavity of the housing (11), thereby ensuring the circulation of the internal air. The power port (19) is used to connect an external power supply. The wiring port (14) is used to connect an output / input connector. The indicator light (15) is used for working indication. The indicator light is green when working normally and turns red when a network abnormality is detected. S3, connecting the output / input interface of the intranet / extranet through the wiring port (14), so that the detection mainboard (2) can detect the network, the data acquisition module (204) is responsible for capturing data packets from the network, including network traffic and device logs, the data processing module (205) parses, filters and preliminarily analyzes the captured data, the analysis engine module (206) performs in-depth analysis on the processed data to identify potential security threats, the main control chip (201) is used to summarize and process the information obtained and detected, the power supply module (202) provides power by cooperating with the power supply port (19), and the alarm information module (207) generates alarm information and triggers corresponding response measures when a security threat is detected, and displays a red light through the indicator light (15), and the data storage module (208) stores and manages the detected data and alarm information for subsequent query and analysis.

Images