Computer network emergency response safety strategy generating system

Abstract

The invention discloses a security policy generation system for computer network emergency response, which is characterized in that: the security policy generation module starts and receives the attack event information, and the security policy generation module calls the preset definition information of the attack event in the database, and then Comparing the attack event information with the preset definition information of the attack event in the database, the security policy generation module will determine the corresponding response mode set A, and then the security policy generation module will perform policy analysis and screening on the determined corresponding response mode set A. After analysis and screening, a subset of response methods is obtained. Finally, the security policy generation module selects the response method with the highest comprehensive coefficient as the final response method according to the policy control principle. This system is a network that responds quickly, troubleshoots quickly, and recovers effectively. Emergency troubleshooting system.

Description

Technical field: [0001] The invention relates to the technical field of computer network security, in particular to a security strategy generation system for network emergency response to computer network illegal intrusion. Background technique: [0002] Computer security, defined by the International Standardization Committee: for the security protection of data processing systems and adopted technologies and management, to protect computer hardware, software, and data from being damaged, changed, or leaked due to accidental or malicious reasons. With the development of science and technology and the passage of time, the development of "computer security" is divided into three stages: the first stage, computer security (past): generally refers to physical security, system security, and system reliability; the second stage, network security (now): generally refers to multi-computer systems, open system interconnection, communication and data transmission; the third stage, in...

AI Technical Summary

Problems solved by technology

The current response method can only be limited to local intrusion objects, and lacks an automatic, network-wide, effective response to the real source

Images