A network security cooperative protection method and device

Abstract

The application relates to a network security cooperative protection method and device applied to the field of network security, which effectively improves the protection effect of a server by adding a temperature detection module on the basis of existing cooperative protection, effectively improves the heat dissipation effect of a single server by arranging multiple servers at intervals compared with the close arrangement in the prior art, speeds up the heat exchange efficiency by arranging a jet pipe at the bottom of two adjacent servers, effectively prevents the heat insulation of bubbles and reduces the heat dissipation effect by taking away the bubbles by the jet, additionally connects two adjacent servers by a thermal deformation connecting belt, expands the interval of the servers by the thermal deformation of the thermal deformation connecting belt, thereby further effectively improving the heat dissipation efficiency, and improves the heat dissipation efficiency of the server at the position by sacrificing the heat dissipation resources of other area servers, thereby effectively preventing the security of the server under attack.

Description

Technical Field

[0001] The present invention relates to a network security collaborative protection method and apparatus, and particularly to a network security collaborative protection method and apparatus applied in the field of network security. Background Technology

[0002] Network security refers to the protection of a network system's hardware, software, and data from accidental or malicious damage, alteration, or disclosure, ensuring continuous, reliable, and normal system operation and uninterrupted network services. A DDoS attack aims to overwhelm a target server or network with a large number of requests, exhausting its resources and rendering it unable to provide services to legitimate users.

[0003] In response to the increasingly rampant cyberattacks, existing technologies have developed collaborative protection techniques to combat cyberattacks. For example, a collaborative protection method and system for network security with publication number CN108965289B, and a collaborative defense method and system for network protection with publication number CN109587174B, both of which disclose collaborative defense technical means.

[0004] However, existing collaborative protection methods are mostly based on software-level defense, while the main target of DDoS attacks is the server. By using flood traffic, the server is put under high load until it overheats and burns out. Although there are technical means to protect the server, most of them directly cut off the power to the server through the circuit breaker mechanism to achieve the purpose of protection. Although this can prevent the attack, the sudden power outage will also damage the server itself and affect the normal requests of legitimate users. Summary of the Invention

[0005] In view of the above-mentioned prior art, the technical problem to be solved by the present invention is how to better protect the server when it is under network attack.

[0006] To address the aforementioned issues, this invention provides a network security collaborative protection method and apparatus, comprising a collaborative protection system. The collaborative protection system includes an attack perception layer, a collaborative protection layer, a device protection layer, and a management and control layer. The attack perception layer includes a network attack detection module, a traffic detection module signal-connected to the network attack detection module, a temperature detection module deployed in various network devices, and a thermal attack signature database signal-connected to the temperature detection module. The collaborative protection layer includes a vertical protection module and a horizontal protection module. The vertical protection module includes a cloud security platform deployed in the cloud, a boundary firewall and intrusion prevention system deployed in the network, and an endpoint response system deployed in terminal devices. The horizontal protection module includes a cross-enterprise threat intelligence sharing platform, in which a privacy intelligence gateway is deployed. The management and control layer includes a security policy coordination module, a heat dissipation resource scheduling module, and an arbitration module signal-connected to the traffic detection module and the temperature detection module. The device protection layer includes an active heat dissipation unit deployed on a server, and the active heat dissipation unit is signal-connected to the heat dissipation resource scheduling module. The collaborative network security protection method includes the following steps: S1. The network attack detection module monitors the security of the entire network system in real time. When a DDoS attack is detected, the collaborative protection layer is triggered. The vertical protection module starts the cloud security platform, the perimeter firewall, the intrusion prevention system, and the endpoint response system to conduct collaborative defense against the attack. The security policy coordination module dynamically adjusts the defense policy according to the attack type, forming a multi-level linkage defense mechanism of endpoint protection, network perimeter, and cloud security. At the same time, the horizontal protection module starts the threat intelligence sharing platform, allowing different enterprise systems at the same level to obtain intelligence in advance and start the zero-trust verification mechanism in advance to achieve pre-defense. S2. While the network attack detection module is working, the traffic detection module detects the traffic of network devices and servers, the temperature detection module detects the traffic of network devices and servers simultaneously, and the arbitration module analyzes and judges the traffic and temperature. If the traffic is normal and the temperature rises slowly, it is judged as a hardware failure. If the traffic increases suddenly and the temperature rises sharply, it is judged as a network attack. At this time, the arbitration module triggers the active heat dissipation unit to dissipate heat and also triggers the heat dissipation resource scheduling module to allocate the cooling resources of non-core components to the core components to ensure the stable operation of the core components.

[0007] In the aforementioned network security collaborative protection method, the server temperature detection is incorporated into the collaborative protection security chain while detecting network attacks, effectively improving the protection level of the server. Furthermore, the passive heat dissipation of the server is upgraded to active heat dissipation, and dynamic heat dissipation adjustment can be made according to the location of the attacked server, thereby effectively improving the protection effect.

[0008] As a further improvement of this application, the active heat dissipation unit includes an immersion liquid-cooled server enclosure, an electronic fluorinated liquid filled inside the immersion liquid-cooled server enclosure, guide rails fixedly connected to the inner walls of both sides of the upper end of the immersion liquid-cooled server enclosure, multiple support sliders slidably connected to the guide rails, and positioning pins fixedly connected to the upper side wall of each support slider. The upper end of each server is simultaneously hung on two opposing positioning pins. A thermodeformable connecting strip is fixedly connected between the side walls of two adjacent support sliders, and a rigid heat-conducting rod is fixedly connected to the middle side wall of the thermodeformable connecting strip. Two flexible heat-conducting rods are simultaneously fixedly connected to the rigid heat-conducting rod, and each flexible heat-conducting rod is positioned away from... One end of each rigid heat-conducting rod is fixedly connected to a heat-absorbing plate magnetically attached to the outer surface of the server. An inlet pipe is fixedly connected to the lower side wall of the immersion liquid-cooled server enclosure, and an outlet pipe is fixedly connected directly above the inlet pipe. A manifold connected to the outlet pipe is fixedly connected to the upper inner wall of the immersion liquid-cooled server enclosure. A branch pipe connected to the inlet pipe is fixedly connected to the lower inner wall of the immersion liquid-cooled server enclosure, and multiple equally spaced flow regulators are connected to the side wall of the branch pipe. Each flow regulator is connected to a jet pipe, and multiple equally spaced spray nozzles are opened on the upper side wall of the jet pipe. Each server is located between two adjacent jet pipes.

[0009] As a further improvement to this application, the heat absorption plate is magnetically attached to the position facing the CPU in the server, and a magnetic pad is fixedly embedded in the middle of the heat absorption plate.

[0010] As a further improvement of this application, the distance between two adjacent servers is half the thickness of a single server, and the diameter of the jet tube is equal to the distance between the two adjacent servers. The thermodeformable connecting strip is in an upwardly curved and arched state before deformation, and in a horizontal straight state after deformation. When the thermodeformable connecting strip is deformed, the moving distance of the heat absorption plates on its left and right sides is the diameter of one jet tube.

[0011] As a further improvement of this application, each support slider has a sliding cavity on its inner wall, and a sliding plate is slidably connected inside the sliding cavity. A limit rod is fixedly connected between two adjacent sliding plates, and the limit rod passes through the sliding cavity. An elastic bladder is fixedly connected between the sliding plate and the inner wall of the sliding cavity, and multiple symmetrically distributed pressure sensors are installed on the inner walls of the sliding cavity and the elastic bladder.

[0012] As another improvement of this application, the flow regulator includes a tube body, and the inner wall of the tube body is provided with a plurality of storage slots arranged in a circumferential array. Each storage slot is rotatably connected to a current limiting seat, and the side wall of the current limiting seat is in sealed contact with the inner wall of the storage slot. An electromagnetic seat is fixedly embedded in the inner wall of the storage slot, and the magnetism generated by the electromagnetic seat after being energized repels the current limiting seat. The pressure sensor is signal-connected to the heat dissipation resource scheduling module, and the heat dissipation resource scheduling module is signal-connected to the electromagnetic seat through a control processor.

[0013] As a further improvement to this application, when the flow restrictor is fully retracted into the receiving groove, the outer surface of the flow restrictor is flush with the inner surface of the tube body. The flow restrictor is made of rigid material, and the volume of the flow restrictor is smaller than the volume of the receiving groove.

[0014] As another improvement of this application, a limiting band is also fixedly connected between the flow limiting seat and the inner wall of the storage groove, and the limiting band is made of a flexible, non-elastic material.

[0015] In summary, by adding a temperature detection module to the existing collaborative protection, the server's protection effect can be effectively improved. By spacing multiple servers apart, the heat dissipation of a single server can be effectively improved compared to the tightly arranged layout in existing technologies. By placing jet pipes at the bottom of adjacent servers, the heat exchange efficiency is accelerated, and the jets carry away air bubbles, effectively preventing air bubbles from insulating and reducing heat dissipation. In addition, a thermodeformable connector is used to connect adjacent servers, and the thermal deformation of the connector widens the spacing between servers, thereby further improving heat dissipation efficiency. Furthermore, by sacrificing the heat dissipation resources of servers in other areas to improve the heat dissipation efficiency of servers in this area, the security of attacked servers can be effectively protected. Attached Figure Description

[0016] Figure 1 This is a schematic diagram of a module according to the first embodiment of this application; Figure 2 This is a perspective view of the immersion liquid-cooled server enclosure according to the first embodiment of this application; Figure 3 This is a three-dimensional exploded view of the immersion liquid-cooled server enclosure according to the first embodiment of this application; Figure 4 This is a partial perspective view of the thermo-deformable connecting strip of the first embodiment of this application before deformation; Figure 5 This is a partial perspective view of the thermo-deformable connecting strip of the first embodiment of this application after deformation; Figure 6 This is a perspective view of the jet tube according to the first embodiment of this application; Figure 7 This is a state diagram of the server in the first embodiment of this application before it is attacked. Figure 8 This is a state diagram of the server in the first embodiment of this application after being attacked; Figure 9 This is a front cross-sectional view of the pressure sensor before it is triggered according to the second embodiment of this application; Figure 10 This is a front cross-sectional view of the pressure sensor after it is triggered according to the second embodiment of this application; Figure 11 This is a front cross-sectional view of the flow regulator according to the second embodiment of this application before adjustment; Figure 12 This is a front cross-sectional view of the flow regulator according to the second embodiment of this application after adjustment.

[0017] Explanation of the labels in the diagram: 1. Immersion liquid-cooled server chassis; 2. Guide rail; 3. Support slider; 4. Positioning pin; 5. Thermodeformation connecting strip; 6. Rigid heat-conducting rod; 7. Flexible heat-conducting rod; 8. Heat absorption plate; 801. Magnetic pad; 9. Inlet pipe; 10. Outlet pipe; 11. Manifold; 12. Diverter; 13. Flow regulator; 1301. Pipe body; 1302. Storage slot; 1303. Flow limiting seat; 1304. Electromagnetic seat; 1305. Limiting strip; 14. Jet pipe; 15. Slide plate; 16. Limiting rod; 17. Elastic bladder; 18. Pressure sensor. Detailed Implementation

[0018] The two embodiments of this application will be described in detail below with reference to the accompanying drawings.

[0019] First implementation method: like Figure 1As shown, a network security collaborative protection method includes a collaborative protection system. The collaborative protection system comprises an attack perception layer, a collaborative protection layer, a device protection layer, and a management and control layer. The attack perception layer includes a network attack detection module, a traffic detection module connected to the network attack detection module, a temperature detection module deployed in various network devices, and a thermal attack signature database connected to the temperature detection module. The collaborative protection layer includes a vertical protection module and a horizontal protection module. The vertical protection module includes a cloud security platform deployed in the cloud, a boundary firewall and intrusion prevention system deployed in the network, and an endpoint response system deployed in terminal devices. The horizontal protection module includes a cross-enterprise threat intelligence sharing platform, in which a privacy intelligence gateway is deployed. The management and control layer includes a security policy coordination module, a heat dissipation resource scheduling module, and a system connected to the traffic detection module and the temperature detection module. The connected arbitration module and the device protection layer include an active cooling unit deployed on the server, which is signal-connected to the cooling resource scheduling module. Most existing protection methods use traffic detection as a single attack reference indicator, which has certain limitations and is prone to misjudgment when the user request volume is large. This implementation adds a temperature detection module to monitor the server temperature in real time, no longer relying on a single traffic detection to determine whether the server is under attack, so as to avoid misjudgment. In addition, the active cooling unit provides reliable protection for the server by physical means. Compared with the existing technology that relies on temperature sensors for detection, this implementation can effectively improve the server's protection response speed and avoid the failure of cooling start due to reduced sensitivity or failure of temperature sensors, thereby effectively preventing the server from overheating and burning out after being attacked. The collaborative network security protection method includes the following steps: S1. The network attack detection module monitors the security of the entire network system in real time. When a DDoS attack is detected, the collaborative protection layer is triggered. The vertical protection module starts the cloud security platform, the perimeter firewall, the intrusion prevention system, and the endpoint response system to conduct collaborative defense against the attack. The security policy coordination module dynamically adjusts the defense policy according to the attack type, forming a multi-level linkage defense mechanism of endpoint protection, network perimeter, and cloud security. At the same time, the horizontal protection module starts the threat intelligence sharing platform, allowing different enterprise systems at the same level to obtain intelligence in advance and start the zero-trust verification mechanism in advance to achieve pre-defense. S2. While the network attack detection module is working, the traffic detection module detects the traffic of network devices and servers, the temperature detection module detects the traffic of network devices and servers simultaneously, and the arbitration module analyzes and judges the traffic and temperature. If the traffic is normal and the temperature rises slowly, it is judged as a hardware failure. If the traffic increases suddenly and the temperature rises sharply, it is judged as a network attack. At this time, the arbitration module triggers the active heat dissipation unit to dissipate heat and also triggers the heat dissipation resource scheduling module to allocate the cooling resources of non-core components to the core components to ensure the stable operation of the core components. like Figure 2 , 3 As shown in Figures 4 and 6, the active cooling unit includes an immersion liquid-cooled server enclosure 1, electronic fluorinated liquid filled inside the immersion liquid-cooled server enclosure 1, guide rails 2 fixedly connected to the inner walls of both sides of the upper end of the immersion liquid-cooled server enclosure 1, multiple support sliders 3 slidably connected to the guide rails 2, and positioning pins 4 fixedly connected to the upper side wall of each support slider 3. The upper end of each server is simultaneously hung on two opposite positioning pins 4. A thermo-deformable connecting strip 5 (made of shape memory alloy, the specific deformation temperature is selected according to the safe operating temperature of the server) is fixedly connected between the side walls of adjacent support sliders 3. (The techniques known to those skilled in the art are not described in detail here.) A rigid heat-conducting rod 6 is fixedly connected to the middle sidewall of the thermodeformable connecting strip 5. Two flexible heat-conducting rods 7 are simultaneously fixedly connected to the rigid heat-conducting rod 6. Each flexible heat-conducting rod 7 has a magnetically attached heat-absorbing plate 8 fixedly connected to its end away from the rigid heat-conducting rod 6. An inlet pipe 9 is fixedly connected to the lower sidewall of the immersion liquid-cooled server housing 1. An outlet pipe 10 is fixedly connected to the immersion liquid-cooled server housing 1 directly above the inlet pipe 9. A manifold 11 connected to the outlet pipe 10 is fixedly connected to the upper inner wall of the immersion liquid-cooled server housing 1. Figure 6 As shown, the lower inner wall of the immersion liquid-cooled server enclosure 1 is fixedly connected to a diversion pipe 12 that communicates with the liquid inlet pipe 9. The side wall of the diversion pipe 12 is connected to multiple equally spaced flow regulators 13. Each flow regulator 13 is connected to a jet pipe 14, and the upper side wall of the jet pipe 14 has multiple equally spaced spray nozzles. Each server is located between two adjacent jet pipes 14. Existing immersion liquid-cooled servers, in order to accommodate more servers within the limited space of the enclosure, arrange the servers closely together. Due to this close arrangement, the amount of electronic fluorinated liquid between adjacent servers is limited, and the heat carried away is also limited, resulting in poor heat dissipation. Furthermore, air bubbles easily become trapped in the narrow gaps between adjacent servers, creating an air film insulation effect. This embodiment addresses this by providing sliding support sliders 3 on the side wall of the immersion liquid-cooled server enclosure 1. Each pair of support sliders 3 is used to hold one server. Figure 4 , 5As shown, adjacent support sliders 3 are connected by thermo-deformable connecting strips 5 to increase the gap between two adjacent servers, allowing more electronic fluorinated liquid to exchange heat with the server. In addition, the jetting effect of the jet tube 14 allows the electronic fluorinated liquid to flow quickly, thereby effectively improving the heat exchange efficiency. Furthermore, the jetting effect of the jet tube 14 can effectively increase the flow speed of the electronic fluorinated liquid, and the jetting can allow bubbles to quickly detach from the outer surface of the server, effectively avoiding the generation of gas film insulation effect. like Figure 4 As shown, the heat absorption plate 8 is magnetically attached to the position facing the CPU in the server, and a magnetic pad 801 is fixedly embedded in the middle of the heat absorption plate 8. Existing technologies monitor the server temperature using temperature sensors, but these sensors are not only cumbersome to install but also prone to failure and have poor operational stability. Therefore, this embodiment uses the heat absorption plate 8 to absorb heat from the server CPU. The magnetic pad 801 is used to magnetically attach the heat absorption plate 8 to the outer casing facing the server CPU. The heat absorption plate 8 conducts heat to the thermally deformable connecting strip 5 through the flexible heat-conducting rod 7 and the rigid heat-conducting rod 6. Figure 7 , 8 As shown, when the server is under a DDoS attack, the CPU temperature rises sharply. When the temperature exceeds the temperature at which the thermo-deformable connecting strip 5 deforms, the thermo-deformable connecting strip 5 changes from a bent state to a straight state. The deformation of the thermo-deformable connecting strip 5 causes the servers on both sides to move away from each other, thereby increasing the gap between the two adjacent servers. This allows more electronic fluorinated liquid to participate in the heat dissipation of the attacked server, thus effectively improving the heat dissipation effect of the server. Moreover, the increased distance between the two adjacent servers can also effectively prevent air bubbles from accumulating between the two servers. The distance between two adjacent servers is half the thickness of a single server, and the diameter of the jet tube 14 is equal to the distance between two adjacent servers. The thermodeformable connecting strip 5 is in an upwardly curved and arched state before deformation, and in a horizontal straight state after deformation. When the thermodeformable connecting strip 5 is deformed, the moving distance of the heat absorption plates 8 on its left and right sides is the diameter of one jet tube 14. When the thermodeformable connecting strip 5 is deformed from a curved state to a straight state, the server connected to the thermodeformable connecting strip 5 is pushed across the diameter of one jet tube 14 to prevent the server from moving directly above the jet tube 14 and affecting the spraying of the electronic fluorinated liquid. By adding a temperature detection module to the existing collaborative protection, the protection effect of the server can be effectively improved. By setting multiple servers at intervals, the heat dissipation of a single server can be effectively improved compared to the tightly arranged layout in the existing technology. By setting jet tubes at the bottom of two adjacent servers, the heat exchange efficiency is accelerated, and the jets are used to carry away air bubbles, effectively preventing air bubbles from insulating and reducing the heat dissipation effect. In addition, a thermodeformable connector is used to connect two adjacent servers. The thermal deformation of the thermodeformable connector increases the interval between the servers, thereby further improving the heat dissipation efficiency.

[0020] Second implementation method: This embodiment optimizes the heat dissipation method based on the first embodiment to enhance the heat dissipation effect on the attacked server, while the rest remains the same as the first embodiment. like Figure 9 , 10 As shown, each support slider 3 has a sliding cavity on its inner wall, and a sliding plate 15 is slidably connected inside the sliding cavity. A limit rod 16 is fixedly connected between two adjacent sliding plates 15, and the limit rod 16 passes through the sliding cavity. An elastic bladder 17 (preferably made of rubber, but other materials can be selected according to actual needs) is fixedly connected between the sliding plate 15 and the inner wall of the sliding cavity. Multiple symmetrically distributed pressure sensors 18 (specific models are selected according to actual needs) are installed on the inner walls of the sliding cavity and the elastic bladder 17. During the deformation of the thermodeformable connecting strip 5, when two adjacent support sliders 3 move away from each other, the sliding plate 15 moves towards the pressure sensor 18. When the thermodeformable connecting strip 5 is deformed into place, the sliding plate 15 presses on the pressure sensor 18. After the pressure sensor 18 detects the pressure signal, it sends it to the heat dissipation resource scheduling module. The elastic bladder 17 has a restorative elasticity due to the stretching of the sliding plate 15, which allows the two adjacent support sliders 3 to quickly reset when the thermodeformable connecting strip 5 returns to its original shape. like Figure 11 , 12As shown, the flow regulator 13 includes a tube body 1301, and the inner wall of the tube body 1301 has multiple surrounding arrayed receiving slots 1302. Each receiving slot 1302 is rotatably connected to a current-limiting seat 1303, and the side wall of the current-limiting seat 1303 is in sealed contact with the inner wall of the receiving slot 1302. An electromagnetic seat 1304 (made of electromagnetic material) is fixedly embedded in the inner wall of the receiving slot 1302, and the magnetism generated by the electromagnetic seat 1304 after being energized repels the current-limiting seat 1303. A pressure sensor 18 is signal-connected to a heat dissipation resource scheduling module, and the heat dissipation resource scheduling module is signal-connected to the electromagnetic seat 1304 through a control processor. When the pressure sensor 18 is triggered, the pressure sensor 18 first sends a signal to the heat dissipation resource scheduling module, which then... The control processor activates the electromagnetic base 1304 located below the unattacked server, while the electromagnetic base 1304 below the unattacked server remains inactive. The magnetic force generated by the activation of the electromagnetic base 1304 repels the current limiting base 1303, causing the current limiting base 1303 to rotate outward from the receiving slot 1302. In this way, multiple current limiting bases 1303 can reduce the flow rate of the flow regulator 13. When the server is attacked, the liquid spray volume and jet flow of the jet pipe 14 below it will increase, thereby effectively enhancing the heat dissipation efficiency of the server. This sacrifices the heat dissipation resources of the unattacked server to effectively improve the heat dissipation efficiency of the attacked server. In this way, the liquid spray volume and jet flow speed of the jet pipe 14 below the attacked server can be increased without changing the hydraulic pressure of the entire liquid supply system, effectively saving energy. like Figure 11 As shown, when the current limiting seat 1303 is fully retracted into the receiving groove 1302, the outer surface of the current limiting seat 1303 is flush with the inner surface of the tube body 1301. The current limiting seat 1303 is made of rigid material (plastic material is preferred, but other materials can also be selected according to actual needs), and the volume of the current limiting seat 1303 is smaller than the volume of the receiving groove 1302. When the server is not under attack, the current limiting seat 1303 is squeezed into the receiving groove 1302 under hydraulic action and stored there, so as not to affect the normal flow of electronic fluorinated liquid. In order to avoid the current limiting seat 1303 from deforming under hydraulic action, the current limiting seat 1303 is made of rigid material. like Figure 12 As shown, a limiting band 1305 is also fixedly connected between the flow limiting seat 1303 and the inner wall of the storage groove 1302. The limiting band 1305 is made of a flexible non-elastic material (fiber material is preferred, but other materials can also be selected according to actual needs). In order to prevent the flow limiting seat 1303 from rotating completely into the flow channel of the flow regulator 13 and being unable to reset, the limiting band 1305 is used to limit the rotation of the flow limiting seat 1303. Compared to existing technologies, this implementation improves the heat dissipation efficiency of attacked servers by sacrificing the heat dissipation resources of unattacked servers, thereby effectively preventing the security of attacked servers. Moreover, the overall liquid supply pressure remains unchanged, effectively saving resources.

[0021] In light of current practical needs, the above-described embodiments adopted in this application are not limited to these. Any changes made within the scope of knowledge possessed by those skilled in the art without departing from the concept of this application still fall within the protection scope of this invention.

Claims

1. A network security collaborative protection method, characterized in that: The system includes a collaborative protection system comprising an attack perception layer, a collaborative protection layer, a device protection layer, and a management and control layer. The attack perception layer includes a network attack detection module, a traffic detection module connected to the network attack detection module, a temperature detection module deployed in various network devices, and a thermal attack signature database connected to the temperature detection module. The collaborative protection layer includes a vertical protection module and a horizontal protection module. The vertical protection module includes a cloud security platform deployed in the cloud, a boundary firewall and intrusion prevention system deployed in the network, and an endpoint response system deployed in terminal devices. The horizontal protection module includes a cross-enterprise threat intelligence sharing platform, in which a privacy intelligence gateway is deployed. The management and control layer includes a security policy coordination module, a heat dissipation resource scheduling module, and an arbitration module connected to the traffic detection module and the temperature detection module. The device protection layer includes an active heat dissipation unit deployed on the server, and the active heat dissipation unit is connected to the heat dissipation resource scheduling module. The network security collaborative protection method includes the following steps: S1. The network attack detection module monitors the security of the entire network system in real time. When a DDoS attack is detected, the collaborative protection layer is triggered. The vertical protection module starts the cloud security platform, the perimeter firewall, the intrusion prevention system, and the endpoint response system to conduct collaborative defense against the attack. The security policy coordination module dynamically adjusts the defense policy according to the attack type, forming a multi-level linkage defense mechanism of endpoint protection, network perimeter, and cloud security. At the same time, the horizontal protection module starts the threat intelligence sharing platform, allowing different enterprise systems at the same level to obtain intelligence in advance and start the zero-trust verification mechanism in advance to achieve pre-defense. S2. While the network attack detection module is working, the traffic detection module detects the traffic of network devices and servers, the temperature detection module detects the traffic of network devices and servers simultaneously, and the arbitration module analyzes and judges the traffic and temperature. If the traffic is normal and the temperature rises slowly, it is judged as a hardware failure. If the traffic increases suddenly and the temperature rises sharply, it is judged as a network attack. At this time, the arbitration module triggers the active heat dissipation unit to dissipate heat and also triggers the heat dissipation resource scheduling module to allocate the cooling resources of non-core components to the core components to ensure the stable operation of the core components.

2. The network security collaborative protection device according to claim 1, characterized in that: The active heat dissipation unit includes an immersion liquid-cooled server enclosure (1), an electronic fluorinated liquid filled inside the immersion liquid-cooled server enclosure (1), guide rails (2) fixedly connected to the inner walls of the upper two sides of the immersion liquid-cooled server enclosure (1), multiple support sliders (3) slidably connected to the guide rails (2), and positioning pins (4) fixedly connected to the upper side wall of each support slider (3). The upper end of each server is simultaneously hung on two opposite positioning pins (4). A thermodeformable connecting strip (5) is fixedly connected between the side walls of two adjacent support sliders (3), and a rigid heat-conducting rod (6) is fixedly connected to the middle side wall of the thermodeformable connecting strip (5). Two flexible heat-conducting rods (7) are fixedly connected to the rigid heat-conducting rod (6), and a magnetic magnet is fixedly connected to the end of each flexible heat-conducting rod (7) away from the rigid heat-conducting rod (6). A heat absorption plate (8) is attached to the outer surface of the server. The lower side wall of the immersion liquid-cooled server housing (1) is fixedly connected to an inlet pipe (9), and the immersion liquid-cooled server housing (1) is fixedly connected to an outlet pipe (10) directly above the inlet pipe (9). The upper inner wall of the immersion liquid-cooled server housing (1) is fixedly connected to a manifold (11) that communicates with the outlet pipe (10). The lower inner wall of the immersion liquid-cooled server housing (1) is fixedly connected to a branch pipe (12) that communicates with the inlet pipe (9). The side wall of the branch pipe (12) is connected to multiple equally spaced flow regulators (13). Each flow regulator (13) is connected to a jet pipe (14), and the upper side wall of the jet pipe (14) is provided with multiple equally spaced spray nozzles. Each server is located between two adjacent jet pipes (14).

3. The network security collaborative protection device according to claim 2, characterized in that: The heat absorption plate (8) is magnetically attached to the position facing the CPU in the server, and a magnetic pad (801) is fixedly embedded in the middle of the heat absorption plate (8).

4. The network security collaborative protection device according to claim 2, characterized in that: The distance between two adjacent servers is half the thickness of a single server, and the diameter of the jet tube (14) is equal to the distance between two adjacent servers. The thermodeformable connecting strip (5) is in an upwardly curved arched state before deformation, and the thermodeformable connecting strip (5) is in a horizontal straight state after deformation. When the thermodeformable connecting strip (5) is deformed, the moving distance of the heat absorption plates (8) on its left and right sides is the diameter of one jet tube (14).

5. The network security collaborative protection device according to claim 2, characterized in that: Each of the support sliders (3) has a sliding cavity on its inner wall, and a sliding plate (15) is slidably connected inside the sliding cavity. A limit rod (16) is fixedly connected between two adjacent sliding plates (15), and the limit rod (16) passes through the sliding cavity. An elastic bladder (17) is fixedly connected between the sliding plate (15) and the inner wall of the sliding cavity, and multiple symmetrically distributed pressure sensors (18) are installed on the inner wall of the sliding cavity opposite to the elastic bladder (17).

6. The network security collaborative protection device according to claim 5, characterized in that: The flow regulator (13) includes a tube (1301), and the inner wall of the tube (1301) is provided with a plurality of storage slots (1302) arranged in a circumferential array. Each storage slot (1302) is rotatably connected to a current limiting seat (1303), and the side wall of the current limiting seat (1303) is in sealed contact with the inner wall of the storage slot (1302). An electromagnetic seat (1304) is fixedly embedded in the inner wall of the storage slot (1302), and the magnetism generated by the electromagnetic seat (1304) after being energized repels the current limiting seat (1303). The pressure sensor (18) is signal-connected to the heat dissipation resource scheduling module, and the heat dissipation resource scheduling module is signal-connected to the electromagnetic seat (1304) through the control processor.

7. The network security collaborative protection device according to claim 6, characterized in that: When the flow limiting seat (1303) is completely housed inside the receiving groove (1302), the outer surface of the flow limiting seat (1303) is flush with the inner surface of the tube body (1301). The flow limiting seat (1303) is made of rigid material, and the volume of the flow limiting seat (1303) is smaller than the volume of the receiving groove (1302).

8. The network security collaborative protection device according to claim 6, characterized in that: The flow limiting seat (1303) and the inner wall of the storage groove (1302) are also fixedly connected to a limiting band (1305), and the limiting band (1305) is made of a flexible non-elastic material.

Images