Safety scanning information bus and its implementation method

Abstract

The present invention discloses a safety scanning information bus, also discloses its implementation method and the method for implementing the cooperation of the engines using this safety scanning information bus. This safety scanning information bus is used for the broad-spectrum safety scanning analyzing system, including operation data memory area inner a engine and cooperative data memory area between engines, each data memory area has multiple logic information lattices; the memory space of the operation data memory area inner a engine use dynamic distribution mechanism and the ones of the operation data memory area between engines uses static distribution mechanism. As the logical Centrum of the information scheduling, exchange and cooperation in the system or between the child engine, this safety scanning information bus can support the various complex cooperation based on the information exchange and transmission in the system efficiently and accurately, also it supports the scanning function in a single analyzing engine or the one completed cooperatively by various engines.

Description

technical field [0001] The invention relates to a security scanning information bus, and also relates to a method for realizing the security scanning information bus and a method for using the security scanning information bus to realize data cooperation in and between security analysis engines, belonging to the technical field of information security. Background technique [0002] In order to solve the problem of network information security, people have successively developed a number of security technical measures such as firewall, intrusion detection, vulnerability scanning, authentication and auditing. These security technical measures can guarantee the security of the information network to a certain extent. However, the technology in the field of information security is developing rapidly, and no single technical measure can completely solve all the problems in the field of information security. [0003] For this reason, people often adopt multiple technical measures...

AI Technical Summary

Problems solved by technology

[0005] However, because there is no uniform standard for the system structure and management interface of different security products, the management configuration made by the existing network security management platform can only be shallow, and the relationship between different products managed by the platform is loosely coupled. , the collaboration between different products only stays at the level of statistical analysis of the log information of several products, and there is no more in-depth and effective organic collaboration mechanism

Images