Information security processing method and system

By introducing node area division and environmental risk judgment modules into the information security processing system, parameter correction processing and information risk index calculation are solved, and traditional information security processing methods are difficult to deal with network threats and lack of real-time evaluation capabilities, achieving more efficient and intelligent information security processing, and improving the security and response capabilities of the network system.

CN120074891AInactive Publication Date: 2025-05-30YUNNAN DEPU TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510141908.2
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-02-09
Publication Date
2025-05-30
Estimated Expiration
Not applicable · inactive patent

AI Technical Summary

Technical Problem

Traditional information security processing methods are difficult to deal with the growing cyber threats, lack effective correction mechanisms, and cannot accurately evaluate and handle information security risks in real time, especially when the network environment changes dynamically.

Method used

Through the node area division module, information security parameter extraction module, node environmental risk judgment module, parameter correction model input module, parameter correction model output module, post-calibration information processing module, original parameter information processing module and information security judgment output module, an environmental risk processing model is established to judge the node area environmental risk, and issue correction instructions based on the judgment results, perform parameter correction processing, and calculate the information risk index to evaluate the information security status.

Benefits of technology

Effectively identify and handle abnormal node areas in the network environment, improve the security of the entire network system, ensure the accuracy and real-time nature of network parameters, promptly detect and respond to potential security threats, and reduce the risks of network attacks and data leakage.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120074891A_ABST
    Figure CN120074891A_ABST
Patent Text Reader

Abstract

The invention relates to the technical field of big data, and discloses an information security processing method and system, and the system comprises a node region division module, an information security parameter extraction module, a node environment risk judgment module, a parameter correction model input module, a parameter correction model output module, and a corrected information processing module. An original parameter information processing module and an information safety judgment output module, which are used for carrying out environment risk judgment on the node area by establishing an environment risk processing model, sending a correction instruction according to a judgment result, receiving the correction instruction, matching the original parameter of the corresponding node area, and carrying out correction processing; the corrected information risk index of the abnormal node area and the information risk index of the normal node area are calculated, the information security state is evaluated based on the information risk index of the normal node area and the corrected information risk index of the abnormal node area, and the result is transmitted to the user side, so that information security vulnerabilities in the system are found in time; and the risk of system faults is reduced.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of big data technology, and more specifically to a method and system for information security processing. Background Art

[0002] An information system is a complex that integrates hardware, software, data, personnel, processes and other components. It is designed to collect, store, process and transmit information to assist the organization's decision-making, coordination and control. With the continuous development of information security technology, various new information security processing methods continue to emerge. These new methods not only improve the information security protection capabilities, but also reduce the cost and complexity of information security protection.

[0003] Due to the complexity of the network environment, traditional information security processing methods are often unable to cope with the growing network threats. With the rapid development of network technology, network attack methods are constantly updated. The detection method that collects network traffic data and analyzes network behavior patterns to identify potential security threats is difficult to cover all potential security threats in network nodes. Therefore, a more efficient and intelligent information security processing method is needed to meet these challenges.

[0004] Traditional information security processing methods often lack effective correction mechanisms when dealing with abnormal nodes and are unable to effectively suppress abnormal behavior. Although current information security processing methods can defend against external attacks and internal threats to a certain extent, they often lack the ability to adapt to dynamic changes in the network environment and are unable to accurately assess and handle information security risks in real time. Summary of the invention

[0005] In order to overcome the above-mentioned defects of the prior art, the present invention provides a system for information security processing to solve the problems existing in the above-mentioned background technology.

[0006] The present invention provides the following technical solution: a system for information security processing, comprising: a node area division module, an information security parameter extraction module, a node environment risk judgment module, a parameter correction model input module, a parameter correction model output module, a corrected information processing module, an original parameter information processing module and an information security judgment output module;

[0007] The node area division module divides the network environment into n node areas through a network planning tool, i=1, 2, 3, ..., n, where i represents the number of the node area;

[0008] The information security parameter extraction module is used to extract information security parameters from each node area, the information security parameters are original parameters, and transmit the original parameters to the parameter correction model input module;

[0009] The node environmental risk judgment module establishes an environmental risk processing model to judge the environmental risk of the node area, and issues a correction instruction to the parameter correction model input module according to the judgment result;

[0010] The parameter correction model input module includes a correction instruction matching unit and a correction model establishment unit, receives the original parameters of the node area and makes the original parameters wait in the waiting area. When receiving a correction instruction, it matches the original parameters of the corresponding node area and performs correction processing on the original parameters;

[0011] The parameter correction model output module outputs the corrected parameters to the post-correction information processing module, and the corrected parameters after the correction processing are the post-correction parameters;

[0012] The post-correction information processing module establishes a post-correction parameter processing model based on the post-correction parameters of the node area, and calculates the post-correction information risk index of each abnormal node area;

[0013] The original parameter information processing module establishes an original parameter processing model based on the original parameters of the node area, and calculates the information risk index of each normal node area;

[0014] The information security judgment output module evaluates the information security status based on the information risk index of each normal node area and the post-correction information risk index of each abnormal node area, and transmits the result to the user terminal.

[0015] Preferably, in the information security parameter extraction module, the original parameters include: the number of times each node area meets adjacent nodes, the total number of times each node area meets other nodes, the duration of connection between each node area and adjacent nodes, and the total duration of connection between each node area and other nodes.

[0016] Preferably, in the node environmental risk judgment module, an environmental risk processing model is established to judge the environmental risk of the node area. The calculation formula of the environmental risk processing model is: Where E i represents the environmental risk situation evaluation index of each node area, μ represents the environmental risk situation management factor, and ∑W i represents the sum of the interference values when each node area is interfered;

[0017] Compare the environmental risk situation evaluation index E i of each node area with the preset environmental risk situation evaluation threshold ΔE. If the environmental risk situation evaluation index E i is greater than or equal to the preset environmental risk situation evaluation threshold ΔE, it is judged as a normal node area. If the environmental risk situation evaluation index E iIf it is less than the preset environmental risk assessment threshold ΔE, it is determined as an abnormal node area, and a correction instruction is issued for the original parameters extracted in the abnormal node area.

[0018] Preferably, in the parameter correction model input module, after the correction instruction matching unit receives the correction instruction, it matches the corresponding original parameters in the waiting area based on the correction instruction, and the correction model establishment unit performs correction processing on the matched corresponding original parameters. The correction formula is: F i (u) = ln[1 + (ΔE - E i )] × f i (u), where f i (u) represents the original parameters of each node area to be corrected, and F i (u) represents the corrected parameters of each node area after correction.

[0019] Preferably, in the corrected information processing module, a corrected parameter processing model is established based on the corrected parameters of the node area, and the specific content of calculating the risk index of the corrected information of each abnormal node area is as follows:

[0020] Step S51: Calculate the adjacent node frequency coefficient of each abnormal node area. The calculation formula is: where F i represents the adjacent node frequency coefficient of each abnormal node area, l i represents the number of times an abnormal node and an adjacent node meet in each abnormal node area, and L i represents the total number of times an abnormal node and other nodes meet in each abnormal node area;

[0021] Step S52: Calculate the adjacent node coupling coefficient of each abnormal node area. The calculation formula is: where P i represents the adjacent node coupling coefficient of each abnormal node area, d i represents the connection duration between an abnormal node and an adjacent node in each abnormal node area, and D i represents the total connection duration between an abnormal node and other nodes in each abnormal node area;

[0022] Step S53: Calculate the risk index of the corrected information of each abnormal node area. The calculation formula is: where, α i represents the risk index of the corrected information of each abnormal node area.

[0023] Preferably, in the original parameter information processing module, an original parameter processing model is established based on the original parameters of the node area, and the information risk index of each normal node area is calculated. The calculation formula is: where β i represents the information risk index of each normal node area, Xi Denote the adjacent node frequency coefficient of each normal node area as Y i Denote the adjacent node coupling coefficient of each normal node area

[0024] Preferably, in the information security judgment output module, the specific content of evaluating the information security status based on the information risk index of each normal node area and the corrected information risk index of each abnormal node area is as follows:

[0025] Step S71: Calculate the first judgment threshold based on the information risk index of each normal node area. The calculation formula is: where Δθ 1 Denote the first judgment threshold, β i Denote the information risk index of each normal node area, x represents the total number of normal node areas. When x equals 0, it means there is no normal node area, and an information security warning message is sent to the client;

[0026] Step S72: Calculate the second judgment threshold based on the information risk index of each abnormal node area. The calculation formula is: where Δθ 2 Denote the second judgment threshold, α i Denote the information risk index of each abnormal node area, y represents the total number of abnormal node areas, where x + y = n, and n represents the total number of node areas;

[0027] Step S73: Conduct an overall analysis of the information security status. The calculation formula is: where D represents the information security status evaluation index;

[0028] Step S74: Compare the information security status evaluation index with the preset information security status evaluation threshold. If the information security status evaluation index is greater than or equal to the preset information security status evaluation threshold, it is determined that the information security status is normal. If the information security status evaluation index is less than the preset information security status evaluation threshold, it is determined that the information security status is abnormal, and an information security warning message is sent to the client.

[0029] A method for information security processing includes the following steps:

[0030] Step S01: Divide the network environment into n node areas through a network planning tool;

[0031] Step S02: Extract information security parameters from each node area, and the information security parameters are original parameters;

[0032] Step S03: Establish an environmental risk processing model to judge the environmental risk of the node area and issue a correction instruction according to the judgment result;

[0033] Step S04: Receive the calibration instruction, match the original parameters of the corresponding node area, and perform calibration processing on the original parameters;

[0034] Step S05: Output the parameters after calibration processing;

[0035] Step S06: Establish a calibrated parameter processing model based on the calibrated parameters of the node area, and calculate the information risk index of the abnormal node area after calibration;

[0036] Step S07: Establish an original parameter processing model based on the original parameters of the node area, and calculate the information risk index of the normal node area;

[0037] Step S08: Evaluate the information security status based on the information risk index of the normal node area and the information risk index of the abnormal node area after calibration, and transmit the result to the user terminal.

[0038] Technical effects and advantages of the present invention:

[0039] The present invention is provided with a node area division module, an information security parameter extraction module, a node environment risk judgment module, a parameter calibration model input module, a parameter calibration model output module, a processed information module after calibration, an original parameter information processing module, and an information security judgment output module. By establishing an environmental risk processing model to judge the environmental risk of the node area, it can effectively identify and process abnormal node areas in the network environment, thereby improving the security of the entire network system; issue a calibration instruction according to the judgment result, receive the calibration instruction and match the original parameters of the corresponding node area, and perform calibration processing to ensure the accuracy and real-time of the network parameters; calculate the information risk index of the abnormal node area after calibration and the information risk index of the normal node area, evaluate the information security status based on the information risk index of the normal node area and the information risk index of the abnormal node area after calibration, and transmit the result to the user terminal, further enhancing the security of the network environment, timely discovering and responding to potential security threats, and reducing the risk of network attacks and data leakage. Description of the drawings

[0040] Figure 1 It is a flowchart of a system for information security processing.

[0041] Figure 2 It is a flowchart of a method for information security processing. Detailed implementation manners

[0042] Next, the technical solutions in the present invention will be clearly and completely described in conjunction with the accompanying drawings in the present invention. In addition, the forms of each structure described in the following embodiments are merely examples, and a method and system for information security processing related to the present invention are not limited to the structures described in the following embodiments. All other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present invention.

[0043] As Figure 1 shown, the present invention provides a system for information security processing, including: a node area division module, an information security parameter extraction module, a node environment risk judgment module, a parameter correction model input module, a parameter correction model output module, a post-correction information processing module, an original parameter information processing module, and an information security judgment output module;

[0044] The node area division module divides the network environment into n node areas through a network planning tool, where i = 1, 2, 3,..., n, and i represents the number of the node area;

[0045] The information security parameter extraction module is used to extract information security parameters from each node area. The information security parameters are original parameters, and the original parameters are transmitted to the parameter correction model input module;

[0046] The node environment risk judgment module establishes an environmental risk processing model to judge the environmental risk of the node area, divides the node area into a normal node area and an abnormal node area, and issues a correction instruction to the parameter correction model input module according to the judgment result;

[0047] The parameter correction model input module includes a correction instruction matching unit and a correction model establishment unit. It receives the original parameters of the node area and makes the original parameters wait in the waiting area. When a correction instruction is received, it matches the original parameters of the corresponding node area and performs correction processing on the original parameters;

[0048] The correction instruction matching unit is used to receive the correction instruction transmitted by the node environment risk judgment module, match the corresponding original parameters according to the correction instruction, and perform correction waiting; the correction model establishment unit establishes a correction model to perform parameter correction processing on the original parameters waiting for correction through a correction formula;

[0049] The parameter correction model output module outputs the parameters after correction processing to the post-correction information processing module, and the parameters after correction processing are post-correction parameters;

[0050] The post-correction information processing module establishes a post-correction parameter processing model based on the post-correction parameters of the node area, and calculates the post-correction information risk index of each abnormal node area;

[0051] The original parameter information processing module establishes an original parameter processing model based on the original parameters of the node area and calculates the information risk index of each normal node area;

[0052] The information security judgment and output module evaluates the information security status based on the information risk index of each normal node area and the corrected information risk index of each abnormal node area, and transmits the result to the user terminal.

[0053] In this embodiment, it should be specifically noted that in the information security parameter extraction module, the original parameters include: the number of times each node area meets adjacent nodes, the total number of times each node area meets other nodes, the duration of connection between each node area and adjacent nodes, and the total duration of connection between each node area and other nodes.

[0054] In this embodiment, it should be specifically noted that in the node environment risk judgment module, an environment risk processing model is established to judge the environment risk of the node area. The calculation formula of the environment risk processing model is: Where E i represents the environmental risk situation evaluation index of each node area, μ represents the environmental risk situation management factor, and ∑W i represents the sum of the interference values when each node area is interfered;

[0055] Compare the environmental risk situation evaluation index E i of each node area with the preset environmental risk situation evaluation threshold ΔE. If the environmental risk situation evaluation index E i is greater than or equal to the preset environmental risk situation evaluation threshold ΔE, it is judged as a normal node area. If the environmental risk situation evaluation index E i is less than the preset environmental risk situation evaluation threshold ΔE, it is judged as an abnormal node area, and a correction instruction is issued for the original parameters extracted in the abnormal node area.

[0056] In this embodiment, it should be specifically noted that in the parameter correction model input module, after the correction instruction matching unit receives the correction instruction, it matches the corresponding original parameters in the waiting area based on the correction instruction, and the correction model establishment unit performs correction processing on the matched corresponding original parameters. The correction formula is: F i (u) = ln[1 + (ΔE - E i )] × f i (u), where f i (u) represents the original parameters of each node area to be corrected, and F i (u) represents the corrected parameters of each node area after correction. When performing correction processing in the abnormal area, the environmental risk situation evaluation index E iLess than the preset environmental risk situation assessment threshold ΔE.

[0057] In this embodiment, it should be specifically noted that in the corrected information processing module, a corrected parameter processing model is established based on the corrected parameters of the node region, and the specific content of calculating the corrected information risk index of each abnormal node region is as follows:

[0058] Step S51: Calculate the adjacent node frequency coefficient of each abnormal node region. The calculation formula is: Where F i Represents the adjacent node frequency coefficient of each abnormal node region, and l i Represents the number of times an abnormal node meets an adjacent node in each abnormal node region, and L i Represents the total number of times an abnormal node meets other nodes in each abnormal node region;

[0059] Step S52: Calculate the adjacent node coupling coefficient of each abnormal node region. The calculation formula is: Where P i Represents the adjacent node coupling coefficient of each abnormal node region, and d i Represents the duration of connection between an abnormal node and an adjacent node in each abnormal node region, and D i Represents the total duration of connection between an abnormal node and other nodes in each abnormal node region;

[0060] Step S53: Calculate the corrected information risk index of each abnormal node region. The calculation formula is: Where, α i Represents the corrected information risk index of each abnormal node region;

[0061] The adjacent node frequency coefficient and the adjacent node coupling coefficient are important indicators reflecting information risk. When the adjacent node frequency coefficient and the adjacent node coupling coefficient are larger, the information risk is lower and the corresponding information risk index is smaller. In each abnormal node region, the environmental risk situation assessment index E i Is less than the preset environmental risk situation assessment threshold ΔE. When the difference between the environmental risk situation assessment index E i And the preset environmental risk situation assessment threshold ΔE is larger, the information risk is higher and the corresponding information risk index is larger.

[0062] In this embodiment, it should be specifically noted that in the original parameter information processing module, an original parameter processing model is established based on the original parameters of the node region, and the specific content of calculating the information risk index of each normal node region is as follows:

[0063] Step S61: Calculate the adjacent node frequency coefficient of each normal node region. The calculation formula is: Where X iDenote the adjacent node frequency coefficient of each normal node region as l i ′ Denote the number of times a normal node meets an adjacent node in each normal node region as L i ′ Denote the total number of times a normal node meets other nodes in each normal node region;

[0064] Step S62: Calculate the adjacent node coupling coefficient of each normal node region. The calculation formula is: where Y i Denote the adjacent node coupling coefficient of each normal node region as d i ′ Denote the duration of connection between a normal node and an adjacent node in each normal node region as D i ′ Denote the total duration of connection between a normal node and other nodes in each normal node region

[0065] Step S63: Calculate the information risk index of each normal node region. The calculation formula is: where β i Denote the information risk index of each normal node region as X i Denote the adjacent node frequency coefficient of each normal node region as Y i Denote the adjacent node coupling coefficient of each normal node region;

[0066] The adjacent node frequency coefficient and the adjacent node coupling coefficient are important indicators reflecting information risk. When the adjacent node frequency coefficient and the adjacent node coupling coefficient are larger, the information risk is lower and the corresponding information risk index is smaller. In each normal node region, the environmental risk situation assessment index E i of the normal node region is larger, indicating that the information risk is lower and the corresponding information risk index is smaller.

[0067] In this embodiment, it should be specifically noted that in the information security judgment output module, the specific content of evaluating the information security status based on the information risk index of each normal node region and the corrected information risk index of each abnormal node region is as follows:

[0068] Step S71: Calculate the first judgment threshold based on the information risk index of each normal node region. The calculation formula is: where Δθ 1 Denote the first judgment threshold, β i Denote the information risk index of each normal node region, and x denote the total number of normal node regions. When x is equal to 0, it means there is no normal node region, and an information security warning message is sent to the client;

[0069] Step S72: Calculate the second judgment threshold based on the information risk index of each abnormal node region. The calculation formula is: where Δθ 2Denote the second judgment threshold, α i Denote the information risk index of each abnormal node area, y denote the total number of abnormal node areas, where x + y = n, and n denote the total number of node areas;

[0070] Step S73: Conduct an overall analysis of the information security status, and the calculation formula is: where D denotes the information security status evaluation index;

[0071] Step S74: Compare the information security status evaluation index with the preset information security status evaluation threshold. If the information security status evaluation index is greater than or equal to the preset information security status evaluation threshold, it is determined that the information security status is normal. If the information security status evaluation index is less than the preset information security status evaluation threshold, it is determined that the information security status is abnormal, and an information security warning message is sent to the client.

[0072] As Figure 2 shown, in this embodiment, it should be specifically noted that a method for information security processing includes the following steps:

[0073] Step S01: Divide the network environment into n node areas through a network planning tool;

[0074] Step S02: Extract information security parameters from each node area, and the information security parameters are original parameters;

[0075] Step S03: Establish an environmental risk processing model to judge the environmental risk of the node area, and issue a correction instruction according to the judgment result;

[0076] Step S04: Receive the correction instruction and match the original parameters of the corresponding node area, and perform correction processing on the original parameters;

[0077] Step S05: Output the parameters after correction processing;

[0078] Step S06: Establish a post-correction parameter processing model based on the post-correction parameters of the node area, and calculate the post-correction information risk index of the abnormal node area;

[0079] Step S07: Establish an original parameter processing model based on the original parameters of the node area, and calculate the information risk index of the normal node area;

[0080] Step S08: Evaluate the information security status based on the information risk index of the normal node area and the post-correction information risk index of the abnormal node area, and transmit the result to the user side.

[0081] In this embodiment, it should be specifically noted that the main difference between this embodiment and the prior art is that this embodiment is provided with a node area division module, an information security parameter extraction module, a node environment risk judgment module, a parameter correction model input module, a parameter correction model output module, a post-correction information processing module, an original parameter information processing module, and an information security judgment output module. By establishing an environment risk processing model to judge the environment risk of the node area, it can effectively identify and process abnormal node areas in the network environment, thereby improving the security of the entire network system; issue a correction instruction according to the judgment result, receive the correction instruction and match the original parameters of the corresponding node area for correction processing to ensure the accuracy and timeliness of the network parameters; calculate the post-correction information risk index of the abnormal node area and the information risk index of the normal node area, evaluate the information security status based on the information risk index of the normal node area and the post-correction information risk index of the abnormal node area, and transmit the result to the user side to further enhance the security of the network environment, timely detect and respond to potential security threats, and reduce the risks of network attacks and data leakage.

[0082] Finally: The above are only the preferred embodiments of the present invention and are not used to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

[0083] The above is only the specific implementation manner of this application, but the protection scope of this application is not limited thereto. Any person skilled in the art within the technical scope disclosed in this application can easily think of changes or replacements, which should all be covered by the protection scope of this application. Therefore, the protection scope of this application should be subject to the protection scope of the claims.

Claims

1. A system for information security processing, characterized in that: include: Node area division module, information security parameter extraction module, node environment risk judgment module, parameter correction model input module, parameter correction model output module, corrected information processing module, original parameter information processing module and information security judgment output module; The node area division module divides the network environment into n node areas through a network planning tool, i=1, 2, 3, ..., n, where i represents the number of the node area; The information security parameter extraction module is used to extract information security parameters from each node area, the information security parameters are original parameters, and transmit the original parameters to the parameter correction model input module; The node environmental risk judgment module establishes an environmental risk processing model to judge the environmental risk of the node area, and issues a correction instruction to the parameter correction model input module based on the judgment result; The parameter correction model input module includes a correction instruction matching unit and a correction model building unit, which receives the original parameters of the node area and makes the original parameters wait in the waiting area, matches the original parameters of the corresponding node area when receiving the correction instruction, and corrects the original parameters; The parameter correction model output module outputs the corrected parameters to the corrected information processing module, and the corrected parameters are corrected parameters; The corrected information processing module establishes a corrected parameter processing model based on the corrected parameters of the node area and calculates the corrected information risk index of each abnormal node area; The original parameter information processing module establishes an original parameter processing model based on the original parameters of the node area and calculates the information risk index of each normal node area; The information security judgment output module evaluates the information security status based on the information risk index of each normal node area and the corrected information risk index of each abnormal node area, and transmits the result to the user end.

2. The information security processing system according to claim 1, characterized in that: In the information security parameter extraction module, the original parameters include: the number of times each node area encounters an adjacent node, the total number of times each node area encounters other nodes, the duration of connection between each node area and an adjacent node, and the total duration of connection between each node area and other nodes.

3. The information security processing system according to claim 1, characterized in that: In the node environmental risk judgment module, an environmental risk processing model is established to judge the environmental risk of the node area. The calculation formula of the environmental risk processing model is: Where E i represents the environmental risk trend assessment index of each node area, μ represents the environmental risk trend management factor, ∑W i It represents the sum of the interference values ​​when each node area is disturbed; The environmental risk assessment index E of each node area i Compared with the preset environmental risk trend assessment threshold ΔE, if the environmental risk trend assessment index E i If the environmental risk trend assessment index E is greater than or equal to the preset environmental risk trend assessment threshold ΔE, it is judged as a normal node area. i If it is less than the preset environmental risk trend assessment threshold ΔE, it is judged as an abnormal node area, and a correction instruction is issued for the original parameters extracted in the abnormal node area.

4. The information security processing system according to claim 1, characterized in that: In the parameter correction model input module, after the correction instruction matching unit receives the correction instruction, it matches the corresponding original parameters in the waiting area based on the correction instruction, and the correction model establishment unit performs correction processing on the matched corresponding original parameters. The correction formula is: F i (u) = ln[1+(ΔE-E i )]×f i (u), where f i (u) represents the original parameters of each node area that needs to be corrected, F i (u) represents the corrected parameters of each node area after correction.

5. The information security processing system according to claim 1, characterized in that: In the corrected information processing module, a corrected parameter processing model is established based on the corrected parameters of the node area, and the specific contents of calculating the corrected information risk index of each abnormal node area are as follows: Step S51: Calculate the adjacent node frequency coefficients of each abnormal node area, and the calculation formula is: where F i Represents the frequency coefficient of the adjacent nodes in each abnormal node area, l i Indicates the number of times an abnormal node encounters an adjacent node in each abnormal node area, L i It indicates the total number of times the abnormal node encounters other nodes in each abnormal node area; Step S52: Calculate the adjacent node coupling coefficients of each abnormal node area, and the calculation formula is: Where P i represents the coupling coefficient of adjacent nodes in each abnormal node area, d i Indicates the duration of the connection between the abnormal node and the adjacent nodes in each abnormal node area, D i Indicates the total duration of the connection between abnormal nodes and other nodes in each abnormal node area; Step S53: Calculate the corrected information risk index of each abnormal node area, and the calculation formula is: Among them, α i Represents the corrected information risk index of each abnormal node area.

6. The information security processing system according to claim 1, characterized in that: In the original parameter information processing module, an original parameter processing model is established based on the original parameters of the node area to calculate the information risk index of each normal node area. The calculation formula is: where β i represents the information risk index of each normal node area, X i Represents the adjacent node frequency coefficient of each normal node area, Y i Represents the adjacent node coupling coefficient of each normal node area.

7. The information security processing system according to claim 1, characterized in that: In the information security judgment output module, the specific contents of evaluating the information security status based on the normal information risk index of each node area and the corrected information risk index of each abnormal node area are as follows: Step S71: Calculate the first judgment threshold based on the information risk index of each normal node area, and the calculation formula is: Where Δθ1 represents the first judgment threshold, β i Indicates the information risk index of each normal node area, x represents the total number of normal node areas, when x is equal to 0, it means there is no normal node area, and the information security warning information is sent to the client; Step S72: Calculate the second judgment threshold based on the information risk index of each abnormal node area, and the calculation formula is: Where Δθ2 represents the second judgment threshold, α i represents the information risk index of each abnormal node area, y represents the total number of abnormal node areas, where x+y=n, n represents the total number of node areas; Step S73: Perform an overall analysis of the information security status, and the calculation formula is: Where D represents the information security status assessment index; Step S74: Compare the information security status assessment index with the preset information security status assessment threshold. If the information security status assessment index is greater than or equal to the preset information security status assessment threshold, the information security status is judged to be normal. If the information security status assessment index is less than the preset information security status assessment threshold, the information security status is judged to be abnormal, and an information security warning message is sent to the client.

8. A method for information security processing, used for using an information security processing system according to any one of claims 1 to 7, characterized in that: The following steps are involved: Step S01: Divide the network environment into n node areas using a network planning tool; Step S02: extracting information security parameters from each node area, where the information security parameters are original parameters; Step S03: Establish an environmental risk processing model to judge the environmental risk of the node area, and issue a correction instruction based on the judgment result; Step S04: receiving the correction instruction and matching the original parameters of the corresponding node area, and performing correction processing on the original parameters; Step S05: Output the corrected parameters; Step S06: establishing a corrected parameter processing model based on the corrected parameters of the node area, and calculating the corrected information risk index of the abnormal node area; Step S07: establishing an original parameter processing model based on the original parameters of the node area, and calculating the information risk index of the normal node area; Step S08: Evaluate the information security status based on the information risk index of the normal node area and the corrected information risk index of the abnormal node area, and transmit the result to the user end.