Dynamic switching method and system of security encryption algorithm

Abstract

The invention discloses a dynamic switching method and system for a security encryption algorithm, and belongs to the technical field of data encryption, and the method comprises the steps: obtaining operation parameters of a server in a current state when the server is attacked by a hacker in each operation stage; acquiring safe operation parameters of the server in each operation state in the safe operation stage, comparing the safe operation parameters of each stage with the current operation parameters, and acquiring abnormal parameters of the server in each stage; analyzing the abnormal parameters to determine a threat level of the server and a response level of the server, distributing a security weight and a response weight to each abnormal parameter according to the threat level and the response level, and further determining a comprehensive weight of each abnormal parameter; and fusing the comprehensive weights of all the abnormal parameters to obtain a comprehensive index of the current server state, and switching a security encryption algorithm of the server according to the comprehensive index. According to the method, the strength and the type of the encryption algorithm are dynamically adjusted, so that the influence on the performance of the server can be reduced as much as possible while the security of the server is guaranteed. Therefore, the user experience can be improved, and the server can still keep a stable running state when being attacked.

Description

Technical Field

[0001] The present invention relates to the technical field of computer encryption, and in particular to a method and system for dynamically switching a security encryption algorithm. Background Art

[0002] With the rapid development of information technology, especially its widespread application in cutting-edge fields such as cloud computing, big data and the Internet of Things (IoT), data security and privacy protection issues have become increasingly prominent and have become the focus of common concern in the technology and social sectors. These fields process massive amounts of data every day, which contain a wealth of user privacy, business secrets and even national security information. Therefore, it is particularly important to take strong encryption measures to protect this information from unauthorized access or leakage.

[0003] Existing servers generally use pre-configured fixed encryption algorithms (such as AES, RSA, etc.) to ensure data security. These algorithms have been widely used in the industry due to their high security and maturity. However, while ensuring data security, fixed encryption algorithms also bring performance challenges that cannot be ignored: High-intensity encryption algorithms consume a lot of CPU resources when performing encryption and decryption operations. When the server processes large-scale data sets, this resource consumption will increase significantly, causing the server's response speed to slow down and even affecting the overall system performance. Especially when the system is attacked, the CPU usage rate rises sharply, and the encryption and decryption process will further slow down the server's response speed. In addition, the processing of encrypted data takes time, which is particularly evident in network transmission. The packaging, transmission and decryption of encrypted data at the receiving end will increase the overall delay of data transmission. For applications that require real-time interaction or low-latency response, this delay will directly affect the user experience and system efficiency.

[0004] In view of the above problems, it is necessary to design a dynamic switching method of security encryption algorithms. When the server is attacked, the encryption method can be switched to achieve a balance between server security and server response speed, thereby improving the user experience. Summary of the invention

[0005] In view of the problems existing in the prior art, the present invention provides a dynamic switching method of a security encryption algorithm, which dynamically cuts the encryption method according to the attack nodes and operating parameters of the server to achieve a balance between server security and server response speed.

[0006] The present invention is achieved through the following technical solutions: In a first aspect, the present application provides a method for dynamically switching a security encryption algorithm, comprising: When the server is attacked by hackers at various operation stages, obtain the operation parameters of the server in the current state; Acquire safe operation parameters of the server for safe operation at each operation stage, and determine abnormal parameters of the service at each operation stage based on the safe operation parameters at each operation stage and the operation parameters at the current state; Analyze the abnormal parameters to determine the threat level of the server and the response level of the server, assign security weights to the abnormal parameters according to the threat level, assign response weights to the abnormal parameters according to the response level, and calculate the comprehensive weights of the abnormal parameters based on the security weights and the response weights; merge the comprehensive weights of all abnormal parameters to obtain a comprehensive indicator of the current server status, and switch the server's security encryption algorithm according to the comprehensive indicator.

[0007] Preferably, the operation stages of the server include a server startup stage, an application loading stage, and a system authority attack stage.

[0008] Preferably, the operating parameters of the boot phase include CPU occupancy rate, CPU occupancy rate, memory occupancy rate, memory occupancy rate, network traffic usage rate and server response rate; The operating parameters of the application loading phase include application response speed, CPU occupancy, memory occupancy and network traffic usage; The operating parameters during the stage when system permissions are attacked include memory usage and hard disk usage.

[0009] Preferably, the determining of abnormal parameters of each operation stage of the service based on the safe operation parameters of each operation stage and the operation parameters in the current state includes: Determine the baseline of each parameter based on the safe operation parameters, compare the parameters in the current state with the corresponding baseline, and determine the abnormal parameters.

[0010] Preferably, the method for determining the baseline of the parameter is as follows: Calculate the average value of each parameter in the historical time series and use the average value as the baseline.

[0011] Preferably, the analyzing of abnormal parameters to determine the threat level of the server and the response level of the server includes: Determine the type of attack the server is subjected to based on the abnormal parameters, determine the threat level of the server based on the attack type, determine the response rate of the server based on the abnormal parameters, and determine the response level of the server based on the response rate.

[0012] Preferably, the switching of the server's security encryption algorithm according to the comprehensive index includes: in the card stage of the server, when the CPU occupancy rate, network traffic usage rate and occupancy rate increase, the server adopts a reversible encryption algorithm or an irreversible encryption algorithm; During the server application loading phase, CPU usage, network traffic usage, and memory usage increase, and the server uses a symmetric irreversible encryption algorithm.

[0013] When the system permissions of the service are attacked, an asymmetric irreversible encryption algorithm is used to protect the server based on the increase in memory usage and hard disk usage.

[0014] In a second aspect, the present application provides a dynamic switching system for a security encryption algorithm, including: The first acquisition module is used to obtain the operating parameters of the server in the current state when the server is attacked by hackers at various operating stages; A second acquisition module is used to obtain the safe operation parameters of the server in each operation stage, and determine the abnormal parameters of each operation stage of the service based on the safe operation parameters of each operation stage and the operation parameters in the current state; The analysis and switching module is used to analyze the abnormal parameters to determine the threat level of the server and the response level of the server, assign security weights to the abnormal parameters according to the threat level, assign response weights to the abnormal parameters according to the response level, and calculate the comprehensive weights of the abnormal parameters based on the security weights and the response weights; the comprehensive weights of all abnormal parameters are integrated to obtain a comprehensive indicator of the current server status, and the security encryption algorithm of the server is switched according to the comprehensive indicator.

[0015] In a third aspect, the present application provides an electronic device, including: Memory for storing computer programs; A processor is used to implement the steps of the dynamic switching method of the security encryption algorithm when executing the computer program.

[0016] In a fourth aspect, the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of the dynamic switching method of the security encryption algorithm are implemented.

[0017] Compared with the prior art, the present invention has the following beneficial technical effects: The present application provides a dynamic switching system for a secure encryption algorithm, which can obtain the operating parameters of the server in different operating stages in real time and compare them with the parameters in the safe operating state, so as to quickly identify abnormal parameters. This real-time and dynamic nature enables the server to respond immediately when it is attacked by hackers and effectively deal with potential security threats. By analyzing the abnormal parameters, the method can automatically determine the threat level and response level of the server, and adjust the strength and type of the encryption algorithm accordingly. This intelligent and automated processing flow reduces the need for manual intervention and improves the efficiency and accuracy of the system. The method not only considers the threat of abnormal parameters to the security of the server, but also considers their impact on the performance of the server. By assigning security weights and response weights to abnormal parameters and calculating the comprehensive weights, the overall security status of the server can be more comprehensively evaluated, so as to make a more reasonable encryption strategy selection. The method can use different encryption algorithms for different operating stages and attack types of the server. For example, different encryption strategies are used to balance security and performance in the boot stage and application loading stage; when the system permissions are attacked, a more powerful encryption algorithm is used to protect the server. This pertinence and flexibility improve the effectiveness and adaptability of the encryption strategy. This method dynamically adjusts the strength and type of encryption algorithms, which can minimize the impact on server performance while ensuring server security. This helps improve user experience and ensures that the server can remain stable when attacked. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 The present invention is a flowchart of a method for dynamically switching a security encryption algorithm. DETAILED DESCRIPTION

[0019] The present invention will be further described in detail below in conjunction with the accompanying drawings, which are intended to explain the present invention rather than to limit it.

[0020] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations.

[0021] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0022] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0023] In the description of the embodiments of the present application, it should be noted that if the terms "upper", "lower", "horizontal", "inner", etc. appear, the orientation or position relationship indicated is based on the orientation or position relationship shown in the drawings, or the orientation or position relationship in which the invented product is usually placed when used. It is only for the convenience of describing the present application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application. In addition, the terms "first", "second", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0024] In addition, if the term "horizontal" appears, it does not mean that the component must be absolutely horizontal, but can be slightly tilted. For example, "horizontal" only means that its direction is more horizontal than "vertical", which does not mean that the structure must be completely horizontal, but can be slightly tilted.

[0025] In the description of the embodiments of the present application, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", and "connect" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal connection of two components. For ordinary technicians in this field, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0026] See also Figure 1 , a method for dynamically switching a security encryption algorithm, comprising the following steps: Step 1: When the server is attacked by hackers in various operating states, the operating parameters of the server in the current state are obtained.

[0027] The running status of the server indicates that the server is running in different stages, the server startup stage, the server application loading stage and the server running stage.

[0028] 1. The server is attacked by hackers during the startup phase. The operating parameters include the central processing unit (CPU) occupancy rate, CPU occupancy rate, memory occupancy rate, memory occupancy rate, network traffic usage rate and server response rate. The operating parameters are analyzed, and the security encryption algorithm is switched based on the characteristics of the server startup state to improve the server's response rate.

[0029] 2. The server is attacked by hackers during the application loading phase, and the operating parameters of the server in its current state are obtained, including application response speed, CPU occupancy rate, CPU occupancy rate, memory occupancy rate, memory occupancy rate and network traffic usage rate.

[0030] 3. If the server is attacked by hackers during operation, the main manifestation is that the system permissions are attacked. The operating parameters include memory usage and hard disk usage.

[0031] Step 2: Obtain the safe operation parameters of each operation stage of the server in a safe operation state, compare the safe operation parameters of each stage with the current operation parameters, and obtain the abnormal parameters of each stage of the service.

[0032] Determine the baseline of each parameter based on the safe operation parameters. The baseline can be the parameter average, median or expected value. Calculate the average value of each parameter in the historical time series, use the average value as the baseline, compare the parameters in the current state with the corresponding baseline, and determine the abnormal parameters.

[0033] Step 3: Analyze the abnormal parameters, assign weights to the abnormal parameters according to the analysis results, merge the weights of the abnormal parameters, and switch the encryption method of the server according to the merged weights.

[0034] Analyze the abnormal parameters to determine the threat level of the server and the response level of the server.

[0035] For example, a sharp increase in CPU usage may indicate malware, while a surge in network traffic may mean a DDoS attack. Based on the characteristics of abnormal parameters and historical experience, determine the threat level to system security. Analyze how abnormal parameters affect server performance. High memory usage may cause slow application response and affect user experience; an increase in CPU usage may directly affect the server's processing power and response rate.

[0036] According to the analysis results of abnormal parameters, safety weight and response weight are assigned to them, and then the comprehensive weight of each abnormal parameter is determined.

[0037] Assign a weight to each abnormal parameter based on its security threat level. The greater the threat, the higher the weight assigned. In addition to security threats, the impact of abnormal parameters on server performance is also considered and the corresponding weight is assigned. Parameters with greater performance impact should also receive higher weights. Combine the security threat weight and performance impact weight to calculate the combined weight of each abnormal parameter. This can be achieved through weighted summation, weighted average, or other suitable mathematical methods.

[0038] The comprehensive weights of all abnormal parameters are combined to obtain a comprehensive indicator that reflects the current server status. This indicator takes into account the impact of security and performance. According to the combined weights, select the appropriate encryption strength. If the comprehensive indicator shows that the server faces serious security threats, choose a stronger encryption algorithm to improve security; if performance impact becomes the main consideration, it may be possible to choose an algorithm with lower encryption strength to increase the response rate while ensuring basic security.

[0039] Among them, the attack type suffered by the server is determined according to the abnormal parameters, and the threat level of the server is determined according to the attack type; the response rate of the server is determined according to the abnormal parameters, and the response level of the server is determined according to the response rate.

[0040] During the server freezing stage, the CPU usage, network traffic usage, and occupancy rate increase rapidly, so the reversible encryption algorithm or irreversible encryption algorithm is switched.

[0041] During the server application loading phase, the CPU usage, network traffic usage, and memory usage increase, and the current encryption algorithm is switched to a symmetric irreversible encryption algorithm.

[0042] When the system permissions of the service are attacked, the current encryption algorithm is switched according to the memory usage and hard disk usage, and an asymmetric irreversible encryption algorithm is used to protect the server.

[0043] The advantages of the dynamic switching method of the security encryption algorithm are mainly reflected in the following aspects: Real-time response and adaptability: By obtaining the operating parameters of the server in different operating stages in real time and comparing them with the baseline under safe operating conditions, this method can quickly identify abnormal parameters and respond to hacker attacks in a timely manner. This real-time nature ensures that the server can quickly adjust the encryption strategy and enhance security protection capabilities when facing security threats.

[0044] Flexibility and efficiency: Based on the analysis results of abnormal parameters, this method can dynamically adjust the strength and type of encryption algorithms. This flexibility not only helps to maintain good performance while ensuring server security, but also makes the best encryption strategy selection based on different threat types and severity. At the same time, by assigning weights to abnormal parameters and fusing them, the overall security status of the server can be evaluated more accurately, improving decision-making efficiency.

[0045] Balance between performance and security: In the process of switching encryption algorithms, this method fully considers the balance between server performance and security. By comprehensively analyzing the impact of abnormal parameters on server performance and the severity of security threats, it is possible to select an encryption strategy that meets security requirements without seriously affecting server performance. This balance helps improve user experience and ensures that the server can maintain a stable operating state when attacked.

[0046] Prevention and response capabilities: By presetting the safe operation parameters and baselines for each operation stage, this method has a certain prevention capability. When the server operation parameters deviate from the baseline, it can issue early warnings and take corresponding encryption measures to effectively prevent potential security threats. At the same time, when attacked, it can quickly switch to a more advanced encryption algorithm to enhance the server's response capabilities.

[0047] Scalability and maintainability: The framework design of this method has strong scalability and maintainability. With the changes in the server operating environment and the emergence of new security threats, the method of obtaining operating parameters, the method of setting baselines, and the switching logic of encryption algorithms can be easily adjusted and optimized. This flexibility helps maintain the long-term effectiveness and security of the system.

[0048] Based on the above-mentioned dynamic switching method of the security encryption algorithm, the present application also proposes a dynamic switching system of the security encryption algorithm, including: The first acquisition module is used to obtain the operating parameters of the server in the current state when the server is attacked by hackers at various operating stages; The second acquisition module is used to obtain the safe operation parameters of the server in each operating state in the safe operation stage, compare the safe operation parameters of each stage with the current operation parameters, and obtain the abnormal parameters of each stage of the service; The analysis and switching module is used to analyze the abnormal parameters to determine the threat level of the server and the response level of the server, assign security weights and response weights to each abnormal parameter according to the threat level and response level, and then determine the comprehensive weight of each abnormal parameter. The comprehensive weights of all abnormal parameters are integrated to obtain a comprehensive indicator of the current server status, and the server's security encryption algorithm is switched according to the comprehensive indicator.

[0049] It should be noted that in the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of each module is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules can be combined or integrated into another device, or some features can be ignored or not executed. The module described as a separate component may or may not be physically separated. The component displayed as a module may be a physical unit or multiple physical units, that is, it may be located in one place, or it may be distributed in multiple different places. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment.

[0050] In addition, each module in each embodiment of the present invention may be integrated into a processing unit, each module may exist physically separately, or two or more modules may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of a software functional unit.

[0051] An electronic device provided in an embodiment of the present application includes a memory and a processor. A computer program is stored in the memory. When the processor executes the computer program, the steps of the dynamic switching method of the security encryption algorithm described in any of the above embodiments are implemented.

[0052] Another electronic device provided in the embodiment of the present application may also include: an input port connected to the processor, used to transmit multimodal data collected by an external acquisition device to the processor; and a display unit connected to the processor, used to display the processing results of the processor to the outside world; a communication module connected to the processor, used to realize the communication between the electronic device and the outside world. The display unit can be a display panel, a laser scanning display, etc.; the communication mode adopted by the communication module includes but is not limited to mobile high-definition link technology (HML), universal serial bus (USB), high-definition multimedia interface (HDMI), wireless connection (including wireless fidelity technology (WiFi), Bluetooth communication technology, low-power Bluetooth communication technology, and communication technology based on IEEE802.11s).

[0053] An embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of the dynamic switching method of the security encryption algorithm described in any of the above embodiments are implemented.

[0054] The computer-readable storage medium involved in the present application includes random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, or any other form of storage medium known in the technical field.

[0055] For the description of the relevant parts of the power load forecasting system, electronic device and computer-readable storage medium provided in the embodiments of the present application, please refer to the detailed description of the corresponding parts in the power load forecasting method provided in the embodiments of the present application, which will not be repeated here. In addition, the parts of the above technical solutions provided in the embodiments of the present application that are consistent with the implementation principles of the corresponding technical solutions in the prior art are not described in detail to avoid excessive elaboration.

[0056] The above contents are only for explaining the technical idea of ​​the present invention and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution in accordance with the technical idea proposed by the present invention shall fall within the protection scope of the claims of the present invention.

Claims

1. A method for dynamically switching a security encryption algorithm, characterized in that: include: When the server is attacked by hackers at various operation stages, obtain the operation parameters of the server in the current state; Acquire safe operation parameters of the server for safe operation at each operation stage, and determine abnormal parameters of the service at each operation stage based on the safe operation parameters at each operation stage and the operation parameters at the current state; Analyze the abnormal parameters to determine the threat level of the server and the response level of the server, assign a security weight to the abnormal parameters according to the threat level, assign a response weight to the abnormal parameters according to the response level, and calculate a comprehensive weight of the abnormal parameters based on the security weight and the response weight; The comprehensive weights of all abnormal parameters are integrated to obtain a comprehensive indicator of the current server status, and the server's security encryption algorithm is switched according to the comprehensive indicator.

2. A method for dynamically switching a security encryption algorithm according to claim 1, characterized in that: The various operation stages of the server include a server startup stage, an application loading stage, and a system authority attack stage.

3. The method for dynamically switching a security encryption algorithm according to claim 2, characterized in that: The operating parameters of the boot phase include CPU occupancy rate, CPU occupancy rate, memory occupancy rate, memory occupancy rate, network traffic usage rate and server response rate; The operating parameters of the application loading phase include application response speed, CPU occupancy, memory occupancy and network traffic usage; The operating parameters during the stage when system permissions are attacked include memory usage and hard disk usage.

4. The method for dynamically switching a security encryption algorithm according to claim 1, characterized in that: The determining of abnormal parameters of each operation stage of the service based on the safe operation parameters of each operation stage and the operation parameters in the current state includes: Determine the baseline of each parameter based on the safe operation parameters, compare the parameters in the current state with the corresponding baseline, and determine the abnormal parameters.

5. A method for dynamically switching a security encryption algorithm according to claim 4, characterized in that: The method for determining the baseline of the parameter is as follows: Calculate the average value of each parameter in the historical time series and use the average value as the baseline.

6. The method for dynamically switching a security encryption algorithm according to claim 1, characterized in that: The step of analyzing the abnormal parameters to determine the threat level of the server and the response level of the server includes: Determine the type of attack the server is subjected to based on the abnormal parameters, determine the threat level of the server based on the attack type, determine the response rate of the server based on the abnormal parameters, and determine the response level of the server based on the response rate.

7. The method for dynamically switching a security encryption algorithm according to claim 1, characterized in that: The method of switching the security encryption algorithm of the server according to the comprehensive index includes: In the server jamming stage, when the CPU usage, network traffic usage, and occupancy rate increase, the server uses a reversible encryption algorithm or an irreversible encryption algorithm; During the server application loading phase, CPU usage, network traffic usage, and memory usage increase, and the server uses a symmetric irreversible encryption algorithm. When the system permissions of the service are attacked, an asymmetric irreversible encryption algorithm is used to protect the server based on the increase in memory usage and hard disk usage.

8. A dynamic switching system for a security encryption algorithm, characterized in that: include: The first acquisition module is used to obtain the operating parameters of the server in the current state when the server is attacked by hackers at various operating stages; A second acquisition module is used to obtain the safe operation parameters of the server in each operation stage, and determine the abnormal parameters of each operation stage of the service based on the safe operation parameters of each operation stage and the operation parameters in the current state; An analysis switching module, configured to analyze the abnormal parameters to determine the threat level of the server and the response level of the server, assign a security weight to the abnormal parameters according to the threat level, assign a response weight to the abnormal parameters according to the response level, and calculate a comprehensive weight of the abnormal parameters based on the security weight and the response weight; The comprehensive weights of all abnormal parameters are integrated to obtain a comprehensive indicator of the current server status, and the server's security encryption algorithm is switched according to the comprehensive indicator.

9. An electronic device, characterized in that: include: Memory for storing computer programs; A processor, used to implement the steps of the dynamic switching method of the security encryption algorithm as described in any one of claims 1-7 when executing the computer program.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of the method for dynamically switching the security encryption algorithm as described in any one of claims 1 to 7.

Images