Network intrusion character configuration method and system

Abstract

The invention discloses a network intrusion character configuration method, which comprises the following steps of: 1) respectively setting a configuration mode for flaw related characteristics and a configuration mode for non flaw related characteristics; 2) establishing a flaw-characteristic correspondence association list, wherein the correspondence association list comprises two fields, namely a flaw name field and an attack characteristic identifier field; 3) scanning a user system to acquire a network security flaw list; 4) searching related characteristics of the network security flaw list of 3) according to the flaw-characteristic correspondence association list established by 2), wherein the flaw related characteristics found in the network security flaw list are called by a joint name, namely the flaw related characteristics, and the characteristics which are not found are called non flaw related characteristics; and 5) setting the configuration modes for the flaw related characteristics found by 4) and the non flaw related characteristics according to the configuration modes set by 1) so as to form an IPS characteristic set configuration example.

Description

Technical field [0001] The invention relates to the field of network security, in particular to a method and system for configuring network intrusion characteristics. Background technique [0002] Cyber ​​attackers can exploit the loopholes in computer software or hardware systems to achieve the purpose of breaking or gaining illegal benefits. For example, using someone else’s computer as a springboard to steal files from other computers, causing someone else’s computer to crash, formatting the disk, monitoring other people’s computers or peeping at others’ privacy, remotely controlling other people’s computers, hacking characteristic website servers to replace the website’s homepage, Downloading the user database causes business losses, attacking the website server to make it inaccessible to users, etc. Network attack technology has been gradually mastered and developed by more and more people, and more and more "dumb" network attack software has been developed and published, w...

AI Technical Summary

Problems solved by technology

There are two hidden dangers in this system: 1) In a large-scale network or complex software system environment, the installation of an upgrade package will lead to service termination, which is generally difficult for users to accept; 2) Similar to dynamic WEB websites, OA systems, and user business system software, They are codes developed by users themselves or commissioned to customize. Unlike commonly used software such as office, even if very dangerous security holes (such as SQL injection) are scanned, it is difficult to obtain upgrade packages within a time acceptable to customers.

Images