Network environment security protection system based on network support platform

Abstract

The invention discloses a network environment security protection system based on a network support platform, which relates to the technical field of network security protection and comprises a data acquisition module, a data analysis module, an importance coefficient acquisition module, a stage security coefficient acquisition module, a stage risk coefficient acquisition module, a risk grade division module and a real-time early warning module. Through a data acquisition module and a data analysis module, each subsystem in the network support platform and a risk type and a risk value corresponding to the subsystem can be comprehensively acquired, a safety risk coefficient corresponding to each subsystem is acquired through calculation, and through a stage risk coefficient acquisition module and a real-time early warning module, a real-time early warning result is obtained. According to the method, the stage risk coefficient corresponding to each stage in the network support platform can be calculated in real time, and the real-time early warning signal is determined and generated according to the real-time stage risk coefficient, so that the network support platform can give an alarm and start emergency response measures in time when the network support platform is attacked, and security incidents are reduced to the greatest extent.

Description

Technical Field

[0001] The present invention belongs to the technical field of network environment security protection, and in particular to a network environment security protection system based on a network support platform. Background Art

[0002] With the rapid development of information technology and the increasing popularity of network applications, network environment security protection is of vital importance. Currently, the identity authentication platform can be used to achieve unified account, unified authentication, unified authority control, and unified audit management of this system. At the same time, with the help of the information security operation and early warning system, centralized monitoring of the network support platform and security situation awareness can be carried out, thereby realizing dynamic network security management and control that integrates monitoring, early warning, protection, detection, response, and recovery. In addition, it is also necessary to ensure data security and backup and recovery, and take corresponding data protection measures for system storage data to ensure that in terms of data security and backup, data transmission integrity, data storage confidentiality, and data backup and recovery can all take corresponding protection measures. Traditional network environment security protection measures mainly rely on technical means such as firewalls, intrusion monitoring systems, and intrusion prevention systems.

[0003] However, traditional network environment security protection measures are often unable to provide comprehensive and effective protection when facing complex and changeable network attacks. In the network support platform, due to the complexity of the system structure and the high correlation between subsystems, once a subsystem is attacked, it will have a serious impact on the entire network support platform. In terms of risk assessment, existing solutions often lack in-depth analysis and quantitative evaluation of each subsystem in the network support platform and its operation stage, which makes it difficult to accurately identify potential security risks; in terms of early warning mechanism, existing solutions lack real-time and accuracy, making it difficult to detect and respond to network attacks in a timely manner. Based on this, a network environment security protection system based on the network support platform is proposed. Summary of the invention

[0004] The purpose of the present invention is to provide a network environment security protection system based on a network support platform, which solves the technical problem that the existing solutions lack in-depth analysis and quantitative evaluation of each subsystem in the network support platform and its operation stage, making it difficult to accurately identify potential security risks.

[0005] The network environment security protection system based on the network support platform includes:

[0006] The data acquisition module is used to obtain each subsystem in the network support platform and its corresponding risk type and risk value;

[0007] The data analysis module is used to analyze each subsystem and its corresponding risk type, and obtain the corresponding safety risk coefficient of each subsystem through calculation;

[0008] The important coefficient acquisition module is used to divide the network support platform into operation stages, evaluate the influence coefficient of each subsystem in each operation stage, and calculate the important coefficient of each operation stage;

[0009] The stage safety factor acquisition module is used to analyze the safety risk factors corresponding to each subsystem in each operation stage and calculate the stage safety factors corresponding to each operation stage;

[0010] The phase risk coefficient acquisition module is used to obtain the important coefficients of each operation phase and the phase safety coefficient for calculation and analysis, and then obtain the phase risk coefficients corresponding to each phase in the network support platform;

[0011] The risk level classification module is used to classify the risk levels of each stage according to the stage risk coefficient;

[0012] The real-time warning module is used to generate real-time warning signals according to the stage risk coefficients corresponding to each stage.

[0013] As a further solution of the present invention: the specific method of calculating and obtaining the safety risk coefficient corresponding to each subsystem is:

[0014] First, any one of the subsystems in the network support platform is randomly selected as the analysis system without replacement; then, for the selected analysis system, the corresponding risk type is marked as i, where i represents the different risk types in the analysis system, and the value range of i is from 1 to the number of corresponding risk types a in the analysis system, a is a positive integer and a≥1; at the same time, the risk values ​​corresponding to each risk type in the analysis system are marked as Ai, and then the security risk coefficient corresponding to the analysis system is calculated;

[0015] Finally, repeat the above steps of selecting the analysis system, marking the risk type and risk value, and calculating the safety risk coefficient, and perform the same analysis and processing on all subsystems in the network support platform to obtain the safety risk coefficient Fj corresponding to each subsystem in the network support platform. j refers to the different subsystems in the network support platform, and the value range of j is from 1 to the number n of subsystems in the network support platform, where n is a positive integer and n≥1.

[0016] As a further solution of the present invention: the specific method of evaluating the influence coefficient of each subsystem at each operation stage is:

[0017] First, the network support platform is divided into operation stages, and these stages are marked as e, where the value range of e is from to the total number of operation stages m, where m is a positive integer and m≥1; then, the data interaction frequency and fault impact range WAje and WBje are obtained in each operation stage, where j refers to different subsystems in the network support platform; then, through the formula, ; Calculate the influence coefficient θje corresponding to each subsystem in each operating stage, where γ is the preset adjustment coefficient, and the specific range is between 1 and 0.

[0018] As a further solution of the present invention: the specific method of calculating the important coefficients of each operation stage is:

[0019] The average impact coefficient of each subsystem at different stages is taken as the important coefficient of each operation stage.

[0020] As a further solution of the present invention: the specific method of calculating the stage safety factor corresponding to each operation stage in the network support platform is:

[0021] The average stage safety factor of each subsystem in different stages is taken as the stage safety factor Qe corresponding to each operation stage.

[0022] As a further solution of the present invention: the specific method of obtaining the stage risk coefficient corresponding to each stage in the network support platform is:

[0023] By formula, ; The stage risk coefficient He corresponding to each stage in the network support platform can be calculated;

[0024] Where e refers to different stages in the network support platform, Qd is any one of the stage safety factors Qe corresponding to each operation stage, and Rd is any one of the important coefficients Re for calculating each operation stage, satisfying m≥d≥1.

[0025] As a further solution of the present invention: the specific method of dividing the risk level of each stage according to the stage risk coefficient is:

[0026] The stage whose stage risk coefficient is greater than the preset value Y1 is regarded as a high-risk stage, the stage whose stage risk coefficient is less than or equal to the preset value Y1 and greater than or equal to the preset value Y2 is regarded as a medium-risk stage, and the stage whose stage risk coefficient is less than the preset value Y2 is regarded as a low-risk stage, where the preset value Y1 is greater than the preset value Y2.

[0027] As a further solution of the present invention: the specific method of calculating and obtaining the safety risk coefficient corresponding to the analysis system is:

[0028] Multiply the risk value of each risk type by its corresponding weight coefficient, then add all the products from to , and the resulting sum is used as the safety risk coefficient corresponding to the analysis system.

[0029] As a further solution of the present invention: the specific method of obtaining the stage risk coefficient corresponding to each stage in the network support platform is:

[0030] The product of the stage safety factor and the importance factor of each stage is used as the stage risk factor corresponding to each stage in the network support platform.

[0031] As a further solution of the present invention: the specific method of determining the generation of the real-time warning signal is:

[0032] By working in collaboration with the data acquisition module, data analysis module, important coefficient acquisition module, stage safety factor acquisition module and stage risk factor acquisition module, the real-time stage risk coefficient of each stage is calculated. When the real-time stage risk coefficient is greater than the preset value Y3, an early warning signal is generated. Otherwise, no processing is performed. The preset value Y3 is greater than the preset value Y1.

[0033] Compared with the prior art, the present invention has the following beneficial effects:

[0034] (1) The present invention can comprehensively obtain each subsystem in the network support platform and its corresponding risk type and risk value through the data acquisition module and the data analysis module, and obtain the security risk coefficient corresponding to each subsystem through calculation, so that the security risk in the network support platform can be quantitatively evaluated, providing strong support for subsequent security protection measures;

[0035] (2) The present invention, through the stage risk coefficient acquisition module and the real-time warning module, can calculate in real time the stage risk coefficients corresponding to each stage in the network support platform, and generate real-time warning signals based on the real-time stage risk coefficients, so that the network support platform can issue an alarm and initiate emergency response measures in a timely manner when it is attacked, thereby minimizing the impact of security incidents on the network support platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 It is a schematic diagram of the system framework structure of the present invention;

[0037] Figure 2 It is a schematic diagram of the structure of the method flow of the present invention;

[0038] Figure 3 This is a schematic diagram of the risk level classification process of the present invention. DETAILED DESCRIPTION

[0039] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0040] Example 1: Please refer to Figure 1-Figure 3 , this application provides a network environment security protection system based on a network support platform, including:

[0041] The data acquisition module is used to acquire each subsystem in the network support platform and the risk type corresponding to each subsystem, and at the same time obtain the risk value of the risk type corresponding to each subsystem;

[0042] It should be noted that the above data can be evaluated and determined by relevant personnel based on factors such as the criticality of the subsystem in the network support platform and business impact. These important coefficients reflect the relative importance of each subsystem in the entire network support platform, which is of great significance for the subsequent calculation of risk coefficients and determination of protection priorities.

[0043] The data analysis module is used to analyze each subsystem in the network support platform and the risk type corresponding to each subsystem, and then obtain the security risk coefficient corresponding to each subsystem in the network support platform. The specific method is:

[0044] Step S1: randomly select one of the subsystems in the network support platform as the analysis system;

[0045] Step S2: Mark the corresponding risk types in the analysis system as i, where i refers to different risk types in the analysis system, i=1, 2, ..., a, a refers to the number of corresponding risk types in the analysis system, and a is a positive integer, and a≥1, and mark the risk values ​​corresponding to each risk type in the analysis system as Ai;

[0046] By formula, ; The safety risk factor F1 corresponding to the analysis system can be calculated;

[0047] Among them, Ab is any one of the risk values ​​corresponding to each risk type, and βb is the weight coefficient corresponding to each risk type, satisfying ≥b≥1, the specific value of βb shall be formulated by relevant personnel according to actual needs;

[0048] Step S3: Repeat the above steps S1-S2 to obtain the security risk coefficient Fj corresponding to each subsystem in the network support platform, where j refers to different subsystems in the network support platform, j=1, 2, ..., n, n refers to the number of subsystems in the network support platform, and n is a positive integer, and n≥1;

[0049] The security risk coefficient Fj corresponding to each subsystem in the network support platform indicates the severity of the impact that may be caused to the network support platform once a risk occurs in each subsystem;

[0050] The important coefficient acquisition module divides the operation stages of the network support platform, obtains the data interaction frequency and fault impact range corresponding to each subsystem in each operation stage, and comprehensively evaluates the impact coefficient corresponding to each subsystem in each operation stage. The average impact coefficient of each subsystem in different stages is used as the important coefficient of each operation stage, so as to evaluate the importance of each subsystem in the network support platform at different operation stages. The specific method is as follows:

[0051] Step T1: Divide the operation phases of the network support platform to obtain the various operation phases of the network support platform, such as the startup phase, the stable operation phase, the maintenance and upgrade phase, etc., and mark these phases as e, where e=1, 2, ..., m, m is the total number of operation phases, and m is a positive integer, m≥1;

[0052] Step T2: Obtain the data interaction frequency and fault impact range of each subsystem at each operation stage, and comprehensively evaluate the impact coefficient of each subsystem at each operation stage. The specific method is as follows:

[0053] The data interaction frequency and fault impact range corresponding to each subsystem in each operation stage are marked as WAje and WBje respectively;

[0054] By formula, ; Calculate and obtain the influence coefficient θje corresponding to each subsystem in each operation stage;

[0055] Among them, γ is the preset adjustment coefficient, the specific range is between 1 and 0, and the specific value can be set by relevant personnel according to actual conditions;

[0056] The average influence coefficient of each subsystem at different stages is used as the important coefficient of each operation stage. The specific method is as follows:

[0057] By formula, ; Calculate the important coefficient Re at each operation stage;

[0058] By comprehensively considering the data interaction frequency and fault impact range of each subsystem at each operating stage, the importance of the entire network support platform at different operating stages can be quantitatively evaluated.

[0059] The stage safety factor acquisition module analyzes the safety risk factors corresponding to each subsystem in each operation stage, and then obtains the stage safety factors corresponding to each operation stage. The specific method is as follows:

[0060] The average stage safety factor of each subsystem in different stages is used as the stage safety factor Qe corresponding to each operation stage. The specific method is:

[0061] By formula, ; Calculate the stage safety factor Qe corresponding to each operation stage;

[0062] The stage risk coefficient acquisition module acquires the important coefficients of each operation stage of the network support platform, and performs comprehensive calculations based on the stage safety coefficients and important coefficients corresponding to each operation stage in the network support platform to obtain the stage risk coefficients corresponding to each stage in the network support platform. The specific method is as follows:

[0063] By formula, ; The stage risk coefficient He corresponding to each stage in the network support platform can be calculated;

[0064] Through the important coefficient acquisition module and the stage safety factor acquisition module, the impact coefficient of each subsystem at each operation stage can be evaluated, and the important coefficient and stage safety factor of each operation stage can be calculated. This measure enables the risk level of the network support platform at different operation stages to be finely managed, which helps to formulate corresponding risk response strategies and protective measures.

[0065] The stage risk coefficient can reflect the overall risk level faced by the network support platform at different operation stages. By analyzing the risk coefficients of each stage, it can be determined which stages require special attention and strengthening of security protection measures. For example, in high-risk stages, the frequency of security monitoring can be increased, access control can be strengthened, and vulnerability scans can be performed more frequently to reduce the possibility of attacks on the network support platform.

[0066] The risk level classification module is used to classify each stage according to the stage risk coefficient corresponding to each stage in the network support platform. The specific method is as follows:

[0067] Obtain the stage risk coefficient He corresponding to each stage in the network support platform, and regard the stage where the stage risk coefficient He is greater than the preset value Y1 as a high-risk stage, the stage where the stage risk coefficient He is less than or equal to the preset value Y1 and greater than or equal to the preset value Y2 as a medium-risk stage, and the stage where the stage risk coefficient He is less than the preset value Y2 as a low-risk stage, where the preset value Y1 is greater than the preset value Y2, and the specific values ​​of the preset value Y1 and the preset value Y2 are formulated by relevant personnel according to actual needs.

[0068] According to different risk levels, corresponding risk response strategies and protection measures are formulated, such as strengthening security monitoring, optimizing access control, conducting vulnerability scanning, etc., to reduce the risk of network support platforms being attacked and realize dynamic network security management and control that integrates monitoring, early warning, protection, detection, response and recovery.

[0069] Through the data acquisition module and the data analysis module, we can comprehensively obtain each subsystem in the network support platform and its corresponding risk type and risk value, and obtain the security risk coefficient corresponding to each subsystem through calculation. This measure enables the security risks in the network support platform to be quantitatively evaluated, providing strong support for subsequent security protection measures.

[0070] Embodiment 2: As embodiment 2 of the present invention, when the present application is implemented, compared with embodiment 1, the technical solution of this embodiment is different from that of embodiment 1 only in that this embodiment includes a real-time warning module;

[0071] The real-time warning module is used to monitor the stage risk coefficients corresponding to each stage in the network support platform in real time to obtain the real-time stage risk coefficients of each stage, and generate real-time warning signals according to the real-time stage risk coefficients. The specific method is as follows;

[0072] The real-time warning module continuously obtains the risk type, risk value, data interaction frequency, and fault impact range information of each subsystem of the network support platform at different operation stages. By working in collaboration with the data acquisition module, data analysis module, important coefficient acquisition module, stage safety factor acquisition module, and stage risk factor acquisition module, the real-time warning module calculates the real-time stage risk coefficient of each stage.

[0073] When the real-time stage risk coefficient of a certain stage is greater than the preset value Y3, it is judged as a high-risk situation and a warning signal is generated. Otherwise, no processing is performed. When a warning signal is generated, an alarm is immediately issued and corresponding emergency response measures are initiated. Emergency response measures may include isolating the affected subsystems, starting backup systems, conducting security audits, etc., to minimize the impact of security incidents on the network support platform. The preset value Y3 is greater than the preset value Y1.

[0074] Through the stage risk coefficient acquisition module and the real-time warning module, the stage risk coefficients corresponding to each stage in the network support platform can be calculated in real time, and real-time warning signals can be generated based on the real-time stage risk coefficients, so that the network support platform can issue alarms and initiate emergency response measures in time when attacked, thereby minimizing the impact of security incidents on the network support platform.

[0075] Embodiment 3: As the embodiment 3 of the present invention, the difference between the present application and the embodiments 1 and 2 during specific implementation is that corresponding risk response strategies and protective measures are formulated for different risk level stages, and the specific methods are as follows:

[0076] During the high-risk phase, we will strengthen security monitoring, increase the frequency and accuracy of security monitoring, use real-time monitoring tools to continuously monitor the various subsystems of the network support platform, deploy professional security information and event management systems, centrally collect, analyze and correlate security events from different data sources, and promptly discover potential security threats. We will arrange dedicated personnel to monitor the platform 24 hours a day to ensure that we can respond quickly when security incidents occur. At the same time, we will strictly limit access to key subsystems and sensitive data, adopt the principle of least privilege, and only grant users the minimum privileges required to complete their work. We will implement multi-factor identity authentication, such as passwords, fingerprints, tokens, etc., to enhance the security of user identity authentication, regularly review user privileges, and promptly revoke unnecessary privileges to prevent abuse of privileges.

[0077] Then, increase the frequency of vulnerability scanning, conduct a comprehensive vulnerability scan at least once a week, promptly discover and fix security vulnerabilities in the system, use automated vulnerability scanning tools combined with manual review to ensure the accuracy and comprehensiveness of vulnerability scanning, prioritize the discovered vulnerabilities, and give priority to fixing high-risk vulnerabilities.

[0078] Increase the frequency of data backup, perform full backup every day, and perform incremental backup regularly, and store the backup data in different physical locations to prevent single point of failure.

[0079] For the medium-risk stage, moderately strengthen security monitoring, conduct security monitoring once a day, focus on the security status of key subsystems and important data, use the automated alarm function of security monitoring tools to promptly detect abnormal situations, regularly analyze security monitoring data, summarize security trends, and provide a basis for further security decisions; optimize access control policies, review user permissions, and ensure that permissions match user job responsibilities; strengthen access management for temporary users and external partners, conduct regular vulnerability scans, conduct vulnerability scans once a month, promptly discover and repair security vulnerabilities in the system, conduct detailed analysis of vulnerability scan results, develop vulnerability repair plans, and track repair progress, pay attention to security announcements and vulnerability warnings, and take timely measures to deal with new security vulnerabilities; use the reporting function of security audit tools to provide management with security status reports to support decision-making.

[0080] Basic security monitoring is performed during the low-risk phase. Security monitoring is performed once a week to check the operating status and security status of the system. Simple security monitoring tools, such as log analysis tools, are used to discover potential security issues. Security monitoring data is summarized regularly to understand the security trends of the system. Conventional access control management: User rights management is performed in accordance with established access control policies to ensure that users can only access authorized resources. Security training is provided to new users to make them aware of the company's security policies and regulations. User accounts are reviewed regularly to clean up accounts and permissions that have not been used for a long time. Regular vulnerability scanning and repair: Vulnerability scanning is performed once a quarter to promptly discover and repair security vulnerabilities in the system. Vulnerability scanning results are evaluated to determine the risk level of the vulnerability and develop a corresponding repair plan. Security policies are evaluated and adjusted regularly to adapt to the ever-changing security environment.

[0081] Risk levels are divided into different stages according to the stage risk coefficient, and corresponding risk response strategies and protection measures are formulated for different risk level stages. For example, in high-risk stages, security monitoring is strengthened, vulnerability scanning frequency is increased, access rights are strictly restricted, etc. In medium-risk stages, monitoring and management are moderately strengthened, and basic security monitoring and routine management are performed in low-risk stages. This can effectively reduce the risk of network support platforms being attacked and achieve dynamic network security management and control.

[0082] Embodiment 4: The technical solution of this embodiment is to combine and implement the solutions of the above-mentioned embodiments 1, 2 and 3.

[0083] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A network environment security protection system based on a network support platform, characterized in that: include: The data acquisition module is used to obtain each subsystem in the network support platform and its corresponding risk type and risk value; The data analysis module is used to analyze each subsystem and its corresponding risk type, and obtain the corresponding safety risk coefficient of each subsystem through calculation; The important coefficient acquisition module is used to divide the network support platform into operation stages, evaluate the influence coefficient of each subsystem in each operation stage, and calculate the important coefficient of each operation stage; The stage safety factor acquisition module is used to analyze the safety risk factors corresponding to each subsystem in each operation stage and calculate the stage safety factors corresponding to each operation stage; The phase risk coefficient acquisition module is used to obtain the important coefficients of each operation phase and the phase safety coefficient for calculation and analysis, and then obtain the phase risk coefficients corresponding to each phase in the network support platform; The risk level classification module is used to classify the risk levels of each stage according to the stage risk coefficient; The real-time warning module is used to generate real-time warning signals according to the stage risk coefficients corresponding to each stage.

2. The network environment security protection system based on the network support platform according to claim 1 is characterized in that: The specific method for calculating the safety risk coefficient corresponding to each subsystem is as follows: First, any one of the subsystems in the network support platform is randomly selected as the analysis system without replacement; then, for the selected analysis system, the corresponding risk type is marked as i, where i represents the different risk types in the analysis system, and the value range of i is from 1 to the number of corresponding risk types a in the analysis system, a is a positive integer and a≥1; at the same time, the risk values ​​corresponding to each risk type in the analysis system are marked as Ai, and then the security risk coefficient corresponding to the analysis system is calculated; Finally, repeat the above steps of selecting the analysis system, marking the risk type and risk value, and calculating the safety risk coefficient, and perform the same analysis and processing on all subsystems in the network support platform to obtain the safety risk coefficient Fj corresponding to each subsystem in the network support platform. j refers to the different subsystems in the network support platform, and the value range of j is from 1 to the number n of subsystems in the network support platform, where n is a positive integer and n≥1.

3. The network environment security protection system based on the network support platform according to claim 2 is characterized in that: The specific method of evaluating the influence coefficient of each subsystem at each operation stage is as follows: First, the network support platform is divided into operation stages, and these stages are marked as e, where the value range of e is from to the total number of operation stages m, where m is a positive integer and m≥1; Then, the data interaction frequency and fault impact range WAje and WBje are obtained in each operation stage, where j refers to different subsystems in the network support platform; then, through the formula, ; Calculate the influence coefficient θje corresponding to each subsystem in each operation stage, where γ is a preset adjustment coefficient, and the specific range is between 1 and 0.

4. The network environment security protection system based on the network support platform according to claim 3 is characterized in that: The specific method for calculating the important coefficients of each operation stage is: The average impact coefficient of each subsystem at different stages is taken as the important coefficient of each operation stage.

5. The network environment security protection system based on the network support platform according to claim 4 is characterized in that: The specific method for calculating the stage safety factor corresponding to each operation stage in the network support platform is as follows: The average stage safety factor of each subsystem in different stages is taken as the stage safety factor Qe corresponding to each operation stage.

6. The network environment security protection system based on the network support platform according to claim 5 is characterized in that: The specific method of obtaining the stage risk coefficient corresponding to each stage in the network support platform is: By formula, ; The stage risk coefficient He corresponding to each stage in the network support platform can be calculated; Where e refers to different stages in the network support platform, Qd is any one of the stage safety factors Qe corresponding to each operation stage, and Rd is any one of the important coefficients Re for calculating each operation stage, satisfying m≥d≥1.

7. The network environment security protection system based on the network support platform according to claim 1 is characterized in that: The specific way to divide the risk level of each stage according to the stage risk coefficient is as follows: The stage whose stage risk coefficient is greater than the preset value Y1 is regarded as a high-risk stage, the stage whose stage risk coefficient is less than or equal to the preset value Y1 and greater than or equal to the preset value Y2 is regarded as a medium-risk stage, and the stage whose stage risk coefficient is less than the preset value Y2 is regarded as a low-risk stage, where the preset value Y1 is greater than the preset value Y2.

8. The network environment security protection system based on the network support platform according to claim 2 is characterized in that: The specific method for calculating the safety risk coefficient corresponding to the analysis system is: Multiply the risk value of each risk type by its corresponding weight coefficient, then add all the products from to , and the resulting sum is used as the safety risk coefficient corresponding to the analysis system.

9. The network environment security protection system based on the network support platform according to claim 1 is characterized in that: The specific method of obtaining the stage risk coefficient corresponding to each stage in the network support platform is: The product of the stage safety factor and the importance factor of each stage is used as the stage risk factor corresponding to each stage in the network support platform.

10. The network environment security protection system based on the network support platform according to claim 7, characterized in that: The specific method for determining the generation of real-time warning signals is as follows: By working in collaboration with the data acquisition module, data analysis module, important coefficient acquisition module, stage safety factor acquisition module and stage risk factor acquisition module, the real-time stage risk coefficient of each stage is calculated. When the real-time stage risk coefficient is greater than the preset value Y3, an early warning signal is generated. Otherwise, no processing is performed. The preset value Y3 is greater than the preset value Y1.

Images