Computer network emergency response early-warning treatment system

Abstract

The invention relates to an early warning processing system for computer network emergency response, characterized in that: the system includes a network consisting of three network segments of external, service and management, and two modules of filtering and processing; Both computers are connected to the router through the external network segment, one end of the router is connected to the service network segment equipped with the Hawkeye network intrusion detector, and the other end of the router is connected to the management network segment. The present invention overcomes the limitations of traditional intrusion detectors in response to intrusion behavior, and establishes an early warning processing system for illegal intrusion of computer networks. The early warning processing system cooperates with the security policy generation system to realize the computer network system Intelligent response and rapid recovery, realizing a computer network emergency troubleshooting system that combines active defense and emergency response disaster recovery capabilities. It integrates attack and evidence collection technology, networked system disaster recovery technology, and system and data rapid recovery technology. Based on the advanced emergency response technology, a relatively intelligent control and processing platform is established.

Description

Technical field: [0001] The invention relates to the technical field of computer network security, in particular to an early warning processing system for emergency response to an illegal intrusion of a computer network. Background technique: [0002] At present, the International Standardization Committee defines the security of computers as follows: for the security protection of the data processing system and the adopted technology and management, to protect the computer hardware, software, and data from being damaged, modified, and altered due to accidental or malicious reasons. Give way. [0003] With the rapid development of technology, computers, and the Internet, computer security is facing more and more serious challenges. People are facing a sharp increase in cyber attacks and a serious proliferation of vicious viruses. Currently, firewalls and antivirus software are still the only network security measures adopted by many networks. Facts have proved that in today's net...

AI Technical Summary

Problems solved by technology

[0005] Since the IDS (Intrusion Detection System Host Intrusion Detector) and / NIDS (Network Intrusion Detection System Network Intrusion Detector) technologies in the current information security technology field are relatively mature, this is a tool designed and configured to ensure the security of computer systems. It is a technology that can detect and report unauthorized or abnormal phenomena in the system in a timely manner. It is a technology used to detect violations of security policies in computer networks: such as violations of illegal intrusion into users; violations of user abuse and other violations of security policies behavior, but the existing response methods can only be limited to local intrusion objects, and lack automatic, network-wide, and effective responses to the real source

Images