The invention discloses an equipment
access control method and
system based on a security sandbox, which adopts an advanced
virtualization technology, constructs a highly isolated operation environment, combines technologies such as
deep packet inspection,
system call interception and
process operation logic analysis, comprehensively monitors access behaviors of processes in the sandbox to virtual equipment, and improves the access performance of the virtual equipment. And the security and credibility of the equipment are evaluated, and illegal processes are prevented from running on the access terminal, so that the security
access control of the equipment is realized. The monitoring comprises data packet content, protocol filtering,
threat detection,
system call interception, process creation, execution and termination
behavior monitoring and the like. In combination with a trust
evaluation algorithm, behavior data features are collected and extracted, trust scoring is performed by applying a
machine learning model, and the equipment
trust level and the access strategy are dynamically adjusted according to the
score. According to the invention, the
access control strategy is managed in a unified manner and deployed quickly based on the security sandbox management program and the
authentication server. After identity
authentication of the equipment, real-time monitoring of process dynamic behaviors in the running process of the equipment is added, and the safety of the equipment in the
data exchange process is further improved.