Network environment security protection system based on network support platform

By employing quantitative assessment and real-time early warning mechanisms, the identification and protection of security risks in the network support platform have been addressed, enabling dynamic security management and control of the network support platform and improving the security and response efficiency of the network environment.

CN119945722BActive Publication Date: 2025-11-28GUANGZHOU POWER SUPPLY BUREAU GUANGDONG POWER GRID CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202411903204.6
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-12-23
Publication Date
2025-11-28
Estimated Expiration
2044-12-23

AI Technical Summary

Technical Problem

Existing network security measures are insufficient to provide comprehensive and effective protection against complex and ever-changing network attacks. They lack in-depth analysis and quantitative assessment of the various subsystems and their operational stages within the network support platform, making it difficult to accurately identify potential security risks. Furthermore, the early warning mechanism lacks real-time performance and accuracy.

Method used

The system employs modules for data acquisition, data analysis, importance coefficient acquisition, stage security coefficient acquisition, and risk level classification to quantitatively assess security risks in the network support platform. It also generates timely warning signals through a real-time early warning module, enabling dynamic security control of the network support platform.

Benefits of technology

It enables quantitative assessment and real-time early warning of security risks to network support platforms, and can promptly identify potential threats and initiate emergency response measures to minimize the impact of security incidents on network support platforms.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119945722B_ABST
    Figure CN119945722B_ABST
Patent Text Reader

Abstract

The application discloses a network environment security protection system based on a network support platform, relates to the technical field of network security protection, and comprises a data acquisition module, a data analysis module, an important coefficient acquisition module, a stage security coefficient acquisition module, a stage risk coefficient acquisition module, a risk grade division module and a real-time early warning module. Through the data acquisition module and the data analysis module, the risk types and risk values of each subsystem in the network support platform and corresponding risk types and risk values can be comprehensively acquired, and the security risk coefficients corresponding to each subsystem can be obtained through calculation. Through the stage risk coefficient acquisition module and the real-time early warning module, the stage risk coefficients corresponding to each stage in the network support platform can be calculated in real time, and a real-time early warning signal can be generated according to the real-time stage risk coefficients, so that the network support platform can timely issue an alarm and start an emergency response measure when under attack, thereby minimizing security incidents.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of network environment security protection, and specifically relates to a network environment security protection system based on a network support platform. BACKGROUND

[0002] With the rapid development of information technology and the increasing popularity of network applications, network environment security protection is crucial. At present, the identity authentication platform can be used to realize unified account, unified authentication, unified permission control and unified audit management of the system. At the same time, with the help of the information security operation and early warning system, the network support platform can be centrally monitored and the security situation awareness can be perceived, so as to realize the dynamic network security management and control of monitoring, early warning, protection, detection, response and recovery. In addition, it is also necessary to ensure data security and backup recovery, and corresponding data protection measures are taken for system storage data to ensure that in terms of data security and backup, data transmission integrity, data storage confidentiality and data backup and recovery can be well protected. Traditional network environment security protection measures mainly rely on firewall, intrusion monitoring system and intrusion prevention system and other technical means.

[0003] However, the traditional network environment security protection measures often fail to provide comprehensive and effective protection when facing complex and variable network attacks. In the network support platform, due to the complexity of the system structure and the high correlation between subsystems, once a subsystem is attacked, it will have a serious impact on the entire network support platform. In terms of risk assessment, the existing scheme often lacks in-depth analysis and quantitative evaluation of each subsystem and its running stage in the network support platform, which makes it difficult to accurately identify potential security risks. In terms of early warning mechanism, the existing scheme lacks real-time and accuracy, and it is difficult to discover and respond to network attacks in a timely manner. Based on this, the network environment security protection system based on the network support platform is proposed. SUMMARY

[0004] The purpose of the present application is to provide a network environment security protection system based on a network support platform, which solves the technical problem that the existing scheme lacks in-depth analysis and quantitative evaluation of each subsystem and its running stage in the network support platform, which makes it difficult to accurately identify potential security risks.

[0005] The network environment security protection system based on the network support platform comprises:

[0006] A data acquisition module is configured to acquire each subsystem in the network support platform and its corresponding risk type and risk value.

[0007] A data analysis module is configured to analyze each subsystem and its corresponding risk type, and obtain the security risk coefficient of each subsystem by calculation.

[0008] An important coefficient obtaining module is configured to divide the operation stages of the network support platform, evaluate the influence coefficients of each subsystem in each operation stage, and calculate the important coefficients of each operation stage.

[0009] A stage security coefficient obtaining module is configured to analyze the security risk coefficients of each subsystem in each operation stage, and calculate the stage security coefficients corresponding to each operation stage.

[0010] A stage risk coefficient obtaining module is configured to combine the important coefficients of each operation stage with the stage security coefficients to calculate and analyze, and thus obtain the stage risk coefficients corresponding to each stage in the network support platform.

[0011] A risk level dividing module is configured to divide the risk levels of each stage according to the stage risk coefficients.

[0012] A real-time early warning module is configured to determine and generate a real-time early warning signal according to the stage risk coefficients corresponding to each stage.

[0013] As a further scheme of the present application, the specific way of calculating the security risk coefficients corresponding to each subsystem is as follows:

[0014] First, one of the subsystems in the network support platform is randomly selected as an analysis system; then, the risk types corresponding to the selected analysis system are marked as i, where i represents different risk types in the analysis system, and the value range of i is from 1 to the number a of risk types corresponding to the analysis system, a is a positive integer and a≥1; meanwhile, the risk values corresponding to each risk type in the analysis system are marked as Ai, and then the security risk coefficient corresponding to the analysis system is calculated.

[0015] Finally, the above steps of selecting an analysis system, marking risk types and risk values, and calculating a security risk coefficient are repeated to perform the same analysis and processing on all subsystems in the network support platform, so as to obtain the security risk coefficients Fj corresponding to each subsystem in the network support platform, where j represents different subsystems in the network support platform, and the value range of j is from 1 to the number n of subsystems in the network support platform, n is a positive integer and n≥1.

[0016] As a further scheme of the present application, the specific way of evaluating the influence coefficients of each subsystem in each operation stage is as follows:

[0017] Firstly, the network support platform is divided into operation stages, and the stages are marked as e respectively, the value range of e is from 1 to the total number of operation stages m, m is a positive integer and m >= 1;Then, the data interaction frequency and fault influence range WAje and WBje of each operation stage are obtained respectively, wherein j represents different subsystems in the network support platform;Then, the influence coefficient θje corresponding to each subsystem in each operation stage is calculated by formula, ; wherein γ is a preset adjustment coefficient, and the specific range is between 1 and 0.

[0018] As a further scheme of the application: the specific way of calculating the importance coefficient of each operation stage is:

[0019] The average influence coefficient of each subsystem in different stages is taken as the importance coefficient of each operation stage.

[0020] As a further scheme of the application: the specific way of calculating the stage safety coefficient corresponding to each operation stage in the network support platform is:

[0021] The average safety risk coefficient of each subsystem in different stages is taken as the stage safety coefficient Qe corresponding to each operation stage.

[0022] As a further scheme of the application: the specific way of obtaining the stage risk coefficient corresponding to each stage in the network support platform is:

[0023] The stage risk coefficient He corresponding to each stage in the network support platform can be calculated by formula, ; namely,

[0024] Wherein e represents different stages in the network support platform, Qd is any one of the stage safety coefficient Qe corresponding to each operation stage, Rd is any one of the importance coefficient Re calculated for each operation stage, and m >= d >= 1.

[0025] As a further scheme of the application: the specific way of dividing the risk level of each stage according to the stage risk coefficient is:

[0026] The stage with a stage risk coefficient greater than a preset value Y1 is taken as a high-risk stage, the stage with a stage risk coefficient less than or equal to the preset value Y1 and greater than or equal to a preset value Y2 is taken as a medium-risk stage, and the stage with a stage risk coefficient less than a preset value Y2 is taken as a low-risk stage, wherein the preset value Y1 is greater than the preset value Y2.

[0027] As a further scheme of the application: the specific way of calculating the safety risk coefficient corresponding to the analysis system is:

[0028] The risk value of each risk type is multiplied by the corresponding weight coefficient, and then all the products are added, and the obtained sum is taken as the corresponding security risk coefficient of the analysis system.

[0029] As a further scheme of the present application, the specific way of obtaining the stage risk coefficient corresponding to each stage in the network support platform is:

[0030] The product between the stage security coefficient and the importance coefficient of each stage is taken as the stage risk coefficient corresponding to each stage in the network support platform.

[0031] As a further scheme of the present application, the specific way of determining the generation of the real-time early warning signal is:

[0032] Through the collaborative work of the data acquisition module, the data analysis module, the importance coefficient acquisition module, the stage security coefficient acquisition module and the stage risk coefficient acquisition module, the real-time stage risk coefficient of each stage is calculated, when the real-time stage risk coefficient is greater than the preset value Y3, the early warning signal is generated, otherwise, no processing is done, and the preset value Y3 is greater than the preset value Y1.

[0033] Compared with the prior art, the present application has the following advantages:

[0034] (1) The present application can comprehensively obtain the risk types and risk values of each subsystem and the corresponding risk types and risk values in the network support platform through the data acquisition module and the data analysis module, and obtain the security risk coefficient corresponding to each subsystem through calculation, so that the security risk of the network support platform can be quantitatively evaluated, and strong support is provided for subsequent security protection measures.

[0035] (2) The present application can calculate the stage risk coefficient corresponding to each stage in the network support platform in real time through the stage risk coefficient acquisition module and the real-time early warning module, and determine the generation of the real-time early warning signal according to the real-time stage risk coefficient, so that the network support platform can timely issue an alarm and start an emergency response measure when attacked, and the influence of the security event on the network support platform is minimized. BRIEF DESCRIPTION OF DRAWINGS

[0036] Fig. 1 is a system framework structure diagram of the present application;

[0037] Fig. 2 is a method flow structure diagram of the present application;

[0038] Fig. 3 is a flow diagram of risk level division of the present application. DETAILED DESCRIPTION

[0039] The technical solutions of the present application will be described clearly and completely below in connection with the embodiments. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of the present application.

[0040] Embodiment one: please refer to Figs. 1-3 The present application provides a network environment security protection system based on a network support platform, comprising:

[0041] A data acquisition module is configured to acquire each subsystem in the network support platform and each risk type corresponding to each subsystem, and obtain a risk value of each risk type corresponding to each subsystem;

[0042] It should be noted that the specific manner of the above data can be determined by relevant personnel according to the key degree of the subsystem in the network support platform, business impact and other factors. These important coefficients reflect the relative importance of each subsystem in the entire network support platform, and are of great significance for subsequent risk coefficient calculation and protection focus determination.

[0043] A data analysis module is configured to analyze each subsystem in the network support platform and each risk type corresponding to each subsystem, and further obtain a security risk coefficient of each subsystem in the network support platform. The specific manner is as follows:

[0044] Step S1: randomly selecting one from each subsystem in the network support platform as an analysis system;

[0045] Step S2: marking each risk type in the analysis system as i, wherein i represents different risk types in the analysis system, i = 1, 2, …, a, a represents the number of risk types corresponding to the analysis system, a is a positive integer, a ≥ 1, and marking each risk value corresponding to each risk type in the analysis system as Ai;

[0046] The security risk coefficient F1 corresponding to the analysis system can be calculated by the formula,

[0047] Wherein, Ab is any one of the risk values corresponding to each risk type, βb is a weight coefficient corresponding to each risk type, satisfying ≥b≥1, and the specific value of βb is determined by relevant personnel according to actual needs;

[0048] ​Step S3: repeating the above step S1-step S2, i.e. obtaining the security risk coefficient Fj corresponding to each subsystem in the network support platform, wherein j represents different subsystems in the network support platform, j=1, 2, …, n, n represents the number of subsystems in the network support platform, n is a positive integer, and n≥1;

[0049] The security risk coefficient Fj corresponding to each subsystem in the network support platform represents the severity of the impact on the network support platform once a risk occurs in each subsystem;

[0050] The important coefficient acquisition module divides the network support platform into running stages, obtains the data interaction frequency and fault influence range corresponding to each subsystem in each running stage, and comprehensively evaluates the influence coefficient corresponding to each subsystem in each running stage. The average influence coefficient of each subsystem at different stages is used as the important coefficient of each running stage, so as to evaluate the importance of each subsystem in the network support platform at different running stages. The specific way is:

[0051] Step T1: dividing the network support platform into running stages to obtain each running stage of the network support platform, such as the startup stage, the stable running stage, the maintenance and upgrade stage, etc., and marking these stages as e, wherein e=1, 2, …, m, m is the total number of running stages, and m is a positive integer, m≥1;

[0052] Step T2: obtaining the data interaction frequency and fault influence range corresponding to each subsystem in each running stage, and comprehensively evaluating the influence coefficient corresponding to each subsystem in each running stage. The specific way is:

[0053] The data interaction frequency and fault influence range corresponding to each subsystem in each running stage are marked as WAje and WBje respectively;

[0054] The influence coefficient θje corresponding to each subsystem in each running stage is calculated by the formula,

[0055] Wherein, γ is a preset adjustment coefficient, the specific range is between 1 and 0, and the specific value can be set by relevant personnel according to actual conditions;

[0056] The average influence coefficient of each subsystem at different stages is used as the important coefficient of each running stage. The specific way is:

[0057] The important coefficient Re of each running stage is calculated by the formula,

[0058] ​​By comprehensively considering the data interaction frequency and fault influence range of each subsystem in each operation stage, the importance of the entire network support platform in different operation stages is quantitatively evaluated.

[0059] The stage security coefficient acquisition module analyzes the security risk coefficients of each subsystem in each operation stage, and then obtains the stage security coefficients corresponding to each operation stage. The specific method is:

[0060] The average security risk coefficients of each subsystem in different stages are taken as the stage security coefficients Qe corresponding to each operation stage. The specific method is:

[0061] The stage security coefficients Qe corresponding to each operation stage are calculated by the formula:

[0062] The stage risk coefficient acquisition module obtains the importance coefficients of each operation stage of the network support platform. According to the stage security coefficients and importance coefficients corresponding to each operation stage in the network support platform, the stage risk coefficients corresponding to each stage in the network support platform are obtained by comprehensive calculation. The specific method is:

[0063] The stage risk coefficients corresponding to each stage in the network support platform can be calculated by the formula:

[0064] Through the importance coefficient acquisition module and the stage security coefficient acquisition module, the influence coefficient of each subsystem in each operation stage can be evaluated, and the importance coefficient and the stage security coefficient of each operation stage can be calculated. This measure enables the risk level of the network support platform in different operation stages to be finely managed, which helps to develop corresponding risk response strategies and protection measures.

[0065] The stage risk coefficient can reflect the overall risk level of the network support platform in different operation stages. By analyzing the risk coefficients of each stage, it can be determined which stages need to be focused on and strengthened in security protection measures. For example, in high-risk stages, the frequency of security monitoring can be increased, access control can be strengthened, and more frequent vulnerability scanning can be performed to reduce the possibility of network support platform being attacked.

[0066] The risk level division module is used to divide the stages according to the stage risk coefficients corresponding to each stage in the network support platform. The specific method is:

[0067] ​​Obtain the stage risk coefficient He corresponding to each stage in the network support platform. Stages with a stage risk coefficient He greater than the preset value Y1 are classified as high-risk stages, stages with a stage risk coefficient He less than or equal to the preset value Y1 but greater than or equal to the preset value Y2 are classified as medium-risk stages, and stages with a stage risk coefficient He less than the preset value Y2 are classified as low-risk stages. The preset value Y1 is greater than the preset value Y2. The specific values ​​of the preset values ​​Y1 and Y2 are determined by relevant personnel based on actual needs.

[0068] For different risk levels, develop corresponding risk response strategies and protective measures, such as strengthening security monitoring, optimizing access control, and conducting vulnerability scanning, to reduce the risk of attacks on the network support platform and achieve dynamic network security management that integrates monitoring, early warning, protection, detection, response, and recovery.

[0069] Through the data acquisition and data analysis modules, it is possible to comprehensively acquire information on each subsystem in the network support platform and its corresponding risk types and risk values. By calculating the security risk coefficients for each subsystem, this measure enables the quantitative assessment of security risks in the network support platform, providing strong support for subsequent security protection measures.

[0070] Example 2: As Example 2 of the present invention, in specific implementation, the technical solution of this example differs from that of Example 1 only in that this example includes a real-time early warning module;

[0071] The real-time early warning module is used to monitor the stage risk coefficients corresponding to each stage in the network support platform in real time to obtain the real-time stage risk coefficients for each stage, and generate real-time early warning signals based on the real-time stage risk coefficients. The specific method is as follows:

[0072] The real-time early warning module continuously acquires information on risk types, risk values, data interaction frequency, and fault impact range of various subsystems of the network support platform at different operational stages. Through collaborative work with the data acquisition module, data analysis module, importance coefficient acquisition module, stage safety coefficient acquisition module, and stage risk coefficient acquisition module, the real-time early warning module calculates the real-time stage risk coefficient for each stage.

[0073] When the real-time stage risk coefficient of a certain stage is greater than the preset value Y3, it is judged as a high-risk situation and an early warning signal is generated. Otherwise, no action is taken. When an early warning signal is generated, an alarm is immediately issued and corresponding emergency response measures are initiated. Emergency response measures may include isolating the affected subsystems, starting the backup system, and conducting security audits, in order to minimize the impact of security events on the network support platform. The preset value Y3 is greater than the preset value Y1.

[0074] Through the stage risk coefficient acquisition module and the real-time early warning module, the respective stage risk coefficients of each stage in the network support platform can be calculated in real time, and a real-time early warning signal is generated according to the real-time stage risk coefficient, so that the network support platform can timely issue an alarm and start emergency response measures when under attack, thereby minimizing the impact of security incidents on the network support platform.

[0075] Embodiment three: As an embodiment of the present application, the present application is different from embodiment one and embodiment two in that corresponding risk response strategies and protection measures are formulated for different risk level stages, and the specific manner is:

[0076] For the high-risk stage, the security monitoring is strengthened, the frequency and accuracy of security monitoring are increased, real-time monitoring tools are used to monitor the subsystems of the network support platform uninterruptedly, professional security information and event management systems are deployed to collect, analyze and correlate security events from different data sources, potential security threats are discovered in time, and personnel are arranged to monitor the platform 24 hours a day to ensure that security incidents can be responded to quickly. At the same time, access to critical subsystems and sensitive data is strictly limited, the principle of least privilege is adopted, only the minimum privilege required by users to complete their work is given, multi-factor authentication such as password, fingerprint, token, etc. is implemented to enhance the security of user identity verification, user permissions are reviewed regularly, unnecessary permissions are revoked in time to prevent abuse of permissions.

[0077] Then, the frequency of vulnerability scanning is increased, at least once a week, a comprehensive vulnerability scanning is performed, security vulnerabilities in the system are discovered and repaired in time, automatic vulnerability scanning tools are used in combination with manual review to ensure the accuracy and comprehensiveness of vulnerability scanning, and the discovered vulnerabilities are prioritized for repair, with high-risk vulnerabilities being repaired first.

[0078] The frequency of data backup is increased, full backup is performed every day, and incremental backup is performed regularly, and backup data is stored in different physical locations to prevent single point failure.

[0079] For the medium-risk stage, moderately strengthen the security monitoring, conduct security monitoring once a day, focus on the security status of key subsystems and important data, use the automatic alarm function of the security monitoring tool to discover abnormal conditions in time, analyze the security monitoring data regularly, summarize the security trends, and provide the basis for further security decisions; optimize the access control strategy, review the user permissions to ensure that the permissions match the user's job responsibilities; strengthen the access management of temporary users and external partners, conduct regular vulnerability scanning, conduct vulnerability scanning once a month, discover and repair security vulnerabilities in the system in time, analyze the vulnerability scanning results in detail, develop a vulnerability repair plan, and track the repair progress, pay attention to security announcements and vulnerability warnings, and take timely measures to deal with new security vulnerabilities; use the reporting function of the security audit tool to provide security status reports to management to support decision-making.

[0080] For the low-risk stage, conduct basic security monitoring, conduct security monitoring once a week, check the running status and security status of the system, use simple security monitoring tools such as log analysis tools to discover potential security problems, summarize the security monitoring data regularly to understand the security trends of the system, and perform routine access control management: manage user permissions according to the established access control strategy to ensure that users can only access the resources they are authorized to access. Train new users on the company's security policies and regulations. Regularly review user accounts and clean up long-unused accounts and permissions. Regular vulnerability scanning and repair: conduct vulnerability scanning once a quarter to discover and repair security vulnerabilities in the system in time. Evaluate the vulnerability scanning results to determine the risk level of the vulnerabilities and develop a corresponding repair plan. Regularly evaluate and adjust the security strategy to adapt to the changing security environment.

[0081] According to the risk level of each stage, different risk levels are divided, and corresponding risk response strategies and protection measures are developed for different risk level stages, such as strengthening security monitoring, increasing vulnerability scanning frequency, and strictly limiting access permissions in the high-risk stage, moderately strengthening monitoring and management in the medium-risk stage, and performing basic security monitoring and routine management in the low-risk stage, which can effectively reduce the risk of network support platform attacks and achieve dynamic network security management and control.

[0082] Embodiment Four: The technical solution of this embodiment is to combine the solutions of Embodiment One, Embodiment Two, and Embodiment Three.

[0083] The above is merely a specific implementation of the present application, but the protection scope of the present application is not limited thereto, and any person skilled in the art can easily think of changes or replacements within the technical scope disclosed in the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A network environment security protection system based on a network support platform, characterized in that, The application comprises the following: A data acquisition module for acquiring various subsystems in a network support platform and their corresponding risk types and risk values; A data analysis module for analyzing various subsystems and their corresponding risk types, and obtaining the security risk coefficients of various subsystems respectively by calculation; An important coefficient acquisition module for dividing the network support platform into running stages, evaluating the influence coefficients of each subsystem in each running stage, and calculating the important coefficients of each running stage; A stage security coefficient acquisition module for analyzing the security risk coefficients of each subsystem in each running stage, and calculating the stage security coefficients corresponding to each running stage respectively; A stage risk coefficient acquisition module for combining the important coefficients of each running stage with the stage security coefficients to calculate and analyze, and then obtaining the stage risk coefficients corresponding to each stage in the network support platform respectively; A risk level division module for dividing the risk levels of each stage according to the stage risk coefficients; A real-time early warning module for generating real-time early warning signals according to the stage risk coefficients corresponding to each stage respectively; The specific way of evaluating the influence coefficients of each subsystem in each running stage is as follows: First, divide the network support platform into running stages, and mark these stages as e respectively, the value range of e is from 1 to the total number of running stages m, m is a positive integer and m≥1; Then, the data interaction frequency and the fault influence range WAje and WBje of each operation stage are obtained, where j represents different subsystems in the network support platform; then, the formula, ; Calculate the influence coefficients θje of each subsystem in each running stage respectively, where γ is a preset adjustment coefficient, and the specific range is between 1 and 0.

2. The network environment security protection system based on a network support platform according to claim 1, characterized in that, The specific way of calculating the security risk coefficients corresponding to each subsystem respectively is as follows: First, randomly select one from the various subsystems in the network support platform as an analysis system without replacement; then, for the selected analysis system, mark the risk types corresponding to the analysis system as i respectively, where i represents different risk types in the analysis system, the value range of i is from 1 to the number of risk types a in the analysis system, a is a positive integer and a≥1; at the same time, mark the risk values corresponding to each risk type in the analysis system as Ai respectively, and then calculate the security risk coefficient corresponding to the analysis system; Finally, repeat the above steps of selecting an analysis system, marking a risk type and a risk value, and calculating a security risk coefficient to analyze and process all subsystems in the network support platform in the same way, and then the security risk coefficients Fj corresponding to each subsystem in the network support platform respectively can be obtained, where j represents different subsystems in the network support platform, the value range of j is from 1 to the number of subsystems n in the network support platform, n is a positive integer and n≥1.

3. The network environment security protection system based on a network support platform according to claim 1, characterized in that, The specific way of calculating the important coefficients of each running stage is as follows: The average influence coefficients of each subsystem in different stages are taken as the important coefficients of each running stage.

4. The network environment security protection system based on a network support platform according to claim 3, characterized in that, The specific way of calculating the stage security coefficients corresponding to each running stage in the network support platform is as follows: The average security risk coefficients of each subsystem in different stages are taken as the stage security coefficients Qe corresponding to each running stage respectively.

5. The network environment security protection system based on a network support platform according to claim 1, characterized in that, The specific way of dividing the risk levels of each stage according to the stage risk coefficients is as follows: The stage risk coefficient greater than a preset value Y1 is regarded as a high-risk stage, the stage risk coefficient less than or equal to the preset value Y1 and greater than or equal to a preset value Y2 is regarded as a medium-risk stage, and the stage risk coefficient less than the preset value Y2 is regarded as a low-risk stage, wherein the preset value Y1 is greater than the preset value Y2.

6. The network environment security protection system based on a network support platform according to claim 2, characterized in that, The specific way of calculating the security risk coefficient corresponding to the analysis system is: The risk value of each risk type is multiplied by the corresponding weight coefficient, and then all the products are added, and the obtained sum is taken as the security risk coefficient corresponding to the analysis system.

7. The network environment security protection system based on a network support platform according to claim 1, characterized in that, The specific way of obtaining the stage risk coefficient corresponding to each stage in the network support platform is: The product between the stage security coefficient and the importance coefficient of each stage is taken as the stage risk coefficient corresponding to each stage in the network support platform.

8. The network environment security protection system based on a network support platform according to claim 5, characterized in that, The specific way of determining the generation of the real-time early warning signal is: Through the collaborative work of the data acquisition module, the data analysis module, the importance coefficient acquisition module, the stage security coefficient acquisition module and the stage risk coefficient acquisition module, the real-time stage risk coefficient of each stage is calculated, when the real-time stage risk coefficient is greater than a preset value Y3, an early warning signal is generated, otherwise, no processing is performed, and the preset value Y3 is greater than the preset value Y1.

Citation Information

Patent Citations

  • Network safety risk assessment system

    CN108881325A

  • Automobile network security management system, automobile, management method and storage medium

    CN115883194A