Network security protection method and network security protection device

Abstract

The invention relates to the technical field of network security, and discloses a network security protection method and a network security protection device, and the device comprises an information data preliminary obtaining module which is used for obtaining information transmitted by a network; and the information cutting, analyzing and judging module is used for cutting and subdividing the acquired network transmission information. According to the system, the cloud platform obtains information without danger according to the judgment module and the secondary judgment unit and transmits the information to the information scanning module, at the moment, the information scanning module can receive the information, and due to the fact that a large amount of information including information A, information B, information C,..., information N is passed, the information A, the information B, the information C,..., the information N are transmitted to the cloud platform; therefore, the information can pass through channel paths arranged in the scanning module, namely a scanning path 1, a scanning path 2, a scanning path 3... a scanning path n, so that the information is scanned, and when dangerous information appears, a green light can be converted into a red light.

Description

Technical Field

[0001] The present invention belongs to the technical field of network security, and in particular, relates to a network security protection method and a network security protection device. Background Art

[0002] The existing network security protection strategies mainly include access control, network isolation, information filtering, information fault tolerance, data mirroring, data backup and data auditing, among which information filtering and access control are the primary protection strategies.

[0003] However, the existing network installation protection often detects the dangers existing in the network through the detection module, and then processes the detected dangerous information. However, when performing the detection, the detected network information is often judged once, but often the information without errors in the judgment may still be dangerous, and the dangerous information may contain safer parts. Therefore, it will appear that the dangerous information that is not easy to detect will not be detected, resulting in it being transmitted through the protection module, which may easily cause network damage.

[0004] In view of this, the present invention is proposed. Summary of the invention

[0005] In order to solve the above technical problems, the basic concept of the technical solution adopted by the present invention is:

[0006] Network security protection devices, including:

[0007] Information data preliminary acquisition module: the information data preliminary acquisition module is used to acquire information transmitted over the network;

[0008] Information cutting analysis and judgment module: the information cutting analysis and judgment module is used to cut and subdivide the acquired network transmission information;

[0009] Danger and danger information secondary judgment module: The danger and danger information secondary judgment module is used to further judge the danger and danger information in the first judgment, and prevent the first judgment from being wrong;

[0010] Information overall scanning module: The information overall scanning module is used to perform overall scanning of information that does not pose a risk;

[0011] Information positioning and interception module: The information positioning and interception module is used to prompt dangerous information that appears during the scanning process with the assistance of the alarm unit. At this time, the positioning module can intercept the information in the scanning channel;

[0012] Dangerous information processing module: The dangerous information processing module is used to process dangerous information.

[0013] As a preferred embodiment of the present invention, the specific positioning module in the information positioning and interception module scans for information that does not pose a threat. Because a large amount of information is transmitted at one time, the scanning module is divided into multiple channels, namely: scanning path 1, scanning path 2, scanning path 3... scanning path n. When there is dangerous information at the scanning location, the alarm unit will turn on the green light and turn red. When the red light appears again, the positioning module will accurately extract the information in the scanning path and transmit it to the dangerous area.

[0014] Network security protection methods include the following methods:

[0015] S1, acquiring the transmitted information based on the processing unit in the cloud platform;

[0016] S2. Based on the information obtained, the information is segmented to obtain specific information, and the obtained information is analyzed;

[0017] S3. Based on the analysis results, the information is judged, and a secondary judgment is made on the existence of danger and danger information;

[0018] S4. Perform an overall scan based on the above-mentioned non-dangerous information;

[0019] S5. Based on the scanning results, dangerous information is located and intercepted.

[0020] As a preferred embodiment of the present invention, the specific information acquisition method based on the above S1 includes: when encountering information that needs to be transmitted over the network, the processing unit in the cloud platform will intercept the information and acquire the intercepted information at the same time.

[0021] As a preferred embodiment of the present invention, the specific cutting method based on the above S2 includes: the cloud platform transmits the acquired information to the cutting module, and the cutting module can cut the information, thereby changing the information from a larger range to smaller information, and: information A can be cut into information 1, information 2, information 3...information n.

[0022] As a preferred embodiment of the present invention, a specific analysis and judgment method based on the cut information in S2 includes: the analysis and judgment module in the cloud platform analyzes the information that has been cut, as well as information 1, information 2, information 3...information n, separately through the analysis unit at this time. According to the analysis results, the judgment module can intercept whether there are any network security risks in the information 1, information 2, information 3...information n, and extract the information.

[0023] As a preferred embodiment of the present invention, the specific method based on the secondary judgment in the above S3 includes: the cloud platform judges the extracted information with safety hazards as dangerous information, and then the secondary judgment unit can analyze the information again, so as to judge whether it is dangerous based on the analysis results.

[0024] As a preferred embodiment of the present invention, the specific scanning method based on the above S4 includes: the cloud platform obtains the information that there is no danger according to the judgment module and the secondary judgment unit, and transmits it to the information scanning module. At this time, the information scanning module will be able to receive the information. Because more information passes through each time, namely information A, information B, information C...information N, the information can pass through the channel paths set in the scanning module, namely scanning path 1, scanning path 2, scanning path 3...scanning path n, so as to scan the information. When dangerous information appears, the green light will be able to turn into a red light.

[0025] As a preferred embodiment of the present invention, the specific positioning and interception method based on the above S5 includes: when a scanning channel where the green light is converted to a red light appears, the positioning unit can accurately locate the channel, intercept and extract the information, and classify it as dangerous information, so that the dangerous information can be discarded or destroyed through the processing unit.

[0026] Compared with the prior art, the present invention has the following beneficial effects:

[0027] In the present invention, the cloud platform obtains information that does not contain danger according to the judgment module and the secondary judgment unit, and transmits it to the information scanning module. At this time, the information scanning module will be able to receive the information. Because more information passes through each time, namely information A, information B, information C...information N, the information can pass through the channel paths set in the scanning module, namely scanning path 1, scanning path 2, scanning path 3...scanning path n, respectively, so as to scan the information. When dangerous information appears, the green light will be able to turn into a red light; when a scanning channel that turns from a green light to a red light appears, the positioning unit can accurately locate the channel, intercept and extract the information, and classify it as dangerous information, so that the dangerous information can be discarded or destroyed through the processing unit, thereby ensuring the accuracy of the judgment to a certain extent.

[0028] The specific implementation modes of the present invention are further described in detail below in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In the attached picture:

[0030] Figure 1 It is an overall schematic diagram of a network security protection method and a network security protection device;

[0031] Figure 2 A schematic diagram of a network security protection method and a network security protection device;

[0032] Figure 3 A schematic diagram of a network security protection method and a network security protection device;

[0033] Figure 4 The present invention is a schematic diagram of a network security protection method and a positioning method of a network security protection device. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. The following embodiments are used to illustrate the present invention.

[0035] Embodiment 1:

[0036] like Figure 1 As shown, the network security protection device includes:

[0037] Information data preliminary acquisition module: the information data preliminary acquisition module is used to acquire information transmitted over the network;

[0038] Information cutting analysis and judgment module: the information cutting analysis and judgment module is used to cut and subdivide the acquired network transmission information;

[0039] Danger and danger information secondary judgment module: The danger and danger information secondary judgment module is used to further judge the danger and danger information in the first judgment, and prevent the first judgment from being wrong;

[0040] Information overall scanning module: The information overall scanning module is used to perform overall scanning of information that does not pose a risk;

[0041] Information positioning and interception module: The information positioning and interception module is used to prompt dangerous information that appears during the scanning process with the assistance of the alarm unit. At this time, the positioning module can intercept the information in the scanning channel;

[0042] Dangerous information processing module: The dangerous information processing module is used to process dangerous information.

[0043] like Figure 1 As shown, in a specific implementation, the specific positioning module in the information positioning and interception module scans for information that is not dangerous, and because the amount of information transmitted at one time is large, the scanning module is divided into multiple channels, namely: scanning path 1, scanning path 2, scanning path 3... scanning path n, wherein when there is dangerous information at the scanning location, the alarm unit will light up, and the green light will turn into a red light. When the red light appears again, the positioning module will accurately extract the information in the scanning path and transmit it to the dangerous area.

[0044] Embodiment 2:

[0045] like Figures 2 to 4 The present invention also discloses a network security protection method, including the following method:

[0046] S1, acquiring the transmitted information based on the processing unit in the cloud platform;

[0047] S2. Based on the information obtained, the information is segmented to obtain specific information, and the obtained information is analyzed;

[0048] S3. Based on the analysis results, the information is judged, and a secondary judgment is made on the existence of danger and danger information;

[0049] S4. Perform an overall scan based on the above-mentioned non-dangerous information;

[0050] S5. Based on the scanning results, dangerous information is located and intercepted.

[0051] In a specific implementation, the specific information acquisition method based on the above S1 includes: when encountering information that needs to be transmitted over the network, the processing unit in the cloud platform will intercept the information and acquire the intercepted information at the same time.

[0052] Furthermore, based on the specific cutting method in the above S2, the cloud platform transmits the acquired information to the cutting module, and the cutting module can cut the information, thereby changing the information from a larger range to smaller information, and: information A can be cut into information 1, information 2, information 3...information n.

[0053] Furthermore, the specific analysis and judgment method for the cut information based on the above S2 includes: the analysis and judgment module in the cloud platform analyzes the information that has been cut, as well as information 1, information 2, information 3...information n, separately through the analysis unit. According to the analysis results, the judgment module can intercept whether there are any network security risks in the information 1, information 2, information 3...information n, and extract the information.

[0054] Furthermore, the specific method based on the secondary judgment in S3 above includes: the cloud platform judges the extracted information with potential safety hazards as dangerous information, and can then analyze the information again through a secondary judgment unit to determine whether it is dangerous based on the analysis result.

[0055] Furthermore, the specific scanning method based on the above S4 includes: the cloud platform obtains the information that there is no danger according to the judgment module and the secondary judgment unit, and transmits it to the information scanning module. At this time, the information scanning module will be able to receive the information. Because more information passes through each time, namely information A, information B, information C...information N, the information can pass through the channel paths set in the scanning module, namely scanning path 1, scanning path 2, scanning path 3...scanning path n, so as to scan the information. When dangerous information appears, the green light will be able to turn into a red light.

[0056] The specific positioning and interception method based on the above S5 includes: when a scanning channel appears where the green light changes to a red light, the positioning unit can accurately locate the channel, intercept and extract the information, and classify it as dangerous information, so that the dangerous information can be discarded or destroyed through the processing unit.

[0057] The implementation principles of the network security protection method and network security protection device of the present invention are as follows:

[0058] When encountering information that needs to be transmitted over the network, the processing unit in the cloud platform will intercept the information and acquire the intercepted information; the cloud platform transmits the acquired information to the cutting module, and the cutting module can cut the information, thereby changing the information from a larger range into smaller information, and: information A can be cut into information 1, information 2, information 3...information n; the analysis and judgment module in the cloud platform analyzes the information that has been cut, and information 1, information 2, information 3...information n separately through the analysis unit, and according to the analysis results, the judgment module can intercept the information whether there is a network security risk in the information 1, information 2, information 3...information n, and extract the information; the cloud platform judges the extracted information with security risks as dangerous information, and can then use the secondary judgment unit to judge the information again The cloud platform obtains the non-dangerous information according to the judgment module and the secondary judgment unit, and transmits it to the information scanning module. At this time, the information scanning module will be able to receive the information, and because more information passes through each time, namely information A, information B, information C...information N, the information can pass through the channel paths set in the scanning module, namely scanning path 1, scanning path 2, scanning path 3...scanning path n, so as to scan the information. When dangerous information appears, the green light will be able to turn into a red light; when a scanning channel that turns from a green light to a red light appears, the positioning unit can accurately locate the channel, intercept and extract the information, and classify it as dangerous information, so that the dangerous information can be discarded or destroyed through the processing unit, thereby ensuring the accuracy of the judgment to a certain extent.

Claims

1. A network security protection device, characterized in that: include: Information data preliminary acquisition module: the information data preliminary acquisition module is used to acquire information transmitted over the network; Information cutting analysis and judgment module: The information cutting analysis and judgment module is used to cut and subdivide the acquired network transmission information; Danger and danger information secondary judgment module: The danger and danger information secondary judgment module is used to further judge the danger and danger information in the first judgment, and prevent the first judgment from being wrong; Information overall scanning module: The information overall scanning module is used to perform overall scanning of information that does not pose a risk; Information positioning and interception module: The information positioning and interception module is used to prompt dangerous information that appears during the scanning process with the assistance of the alarm unit. At this time, the positioning module can intercept the information in the scanning channel; Dangerous information processing module: The dangerous information processing module is used to process dangerous information.

2. The network security protection device according to claim 1, characterized in that: The specific positioning module in the information positioning and interception module scans for information that does not pose a threat. Because a large amount of information is transmitted at one time, the scanning module is divided into multiple channels, namely: scanning path 1, scanning path 2, scanning path 3...scanning path n. When there is dangerous information at the scanning location, the alarm unit will light up, and the green light will turn into a red light. When the red light appears again, the positioning module will accurately extract the information in the scanning path and transmit it to the dangerous area.

3. A network security protection method, characterized in that: The following methods are included: S1, acquiring the transmitted information based on the processing unit in the cloud platform; S2. Based on the information obtained, the information is segmented to obtain specific information, and the obtained information is analyzed; S3. Based on the analysis results, the information is judged, and a secondary judgment is made on the existence of danger and danger information; S4. Scan the whole system according to the above information that there is no danger; S5. Based on the scanning results, dangerous information is located and intercepted.

4. The network security protection method according to claim 3, characterized in that: The specific information acquisition method based on the above S1 includes: when encountering information that needs to be transmitted over the network, the processing unit in the cloud platform will intercept the information and acquire the intercepted information at the same time.

5. The network security protection method according to claim 3, characterized in that: The specific cutting method based on the above S2 includes: the cloud platform transmits the acquired information to the cutting module, and the cutting module can cut the information, thereby changing the information from a larger range to smaller information, and: information A can be cut into information 1, information 2, information 3...information n.

6. The network security protection method according to claim 3, characterized in that: The specific analysis and judgment method for the cut information based on the above S2 includes: the analysis and judgment module in the cloud platform analyzes the information that has been cut, as well as information 1, information 2, information 3...information n, separately through the analysis unit. According to the analysis results, the judgment module can intercept whether there is any network security risk in information 1, information 2, information 3...information n, and extract the information.

7. The network security protection method according to claim 3, characterized in that: The specific method based on the secondary judgment in S3 above includes: the cloud platform judges the extracted information with potential safety hazards as dangerous information, and then the secondary judgment unit can analyze the information again to judge whether it is dangerous based on the analysis result.

8. The network security protection method according to claim 3, characterized in that: The specific scanning method based on the above S4 includes: the cloud platform obtains the information that there is no danger according to the judgment module and the secondary judgment unit, and transmits it to the information scanning module. At this time, the information scanning module will be able to receive the information. Because more information passes through each time, namely information A, information B, information C...information N, the information can pass through the channel paths set in the scanning module, namely scanning path 1, scanning path 2, scanning path 3...scanning path n, so as to scan the information. When dangerous information appears, the green light will be able to turn into a red light.

9. The network security protection method according to claim 3, characterized in that: The specific positioning and interception method based on the above S5 includes: when a scanning channel appears where the green light changes to a red light, the positioning unit can accurately locate the channel, intercept and extract the information, and classify it as dangerous information, so that the dangerous information can be discarded or destroyed through the processing unit.

Images