Information security defense rule intelligent deployment method based on improved particle swarm optimization

Abstract

The invention discloses an information security defense rule intelligent deployment method based on an improved particle swarm optimization. The method comprises the steps of deployment strategies of the intelligent learning algorithm and security rules; according to attack frequency and type and potential attacks in parametric improved particle swarm optimization system logs, the intelligent learning algorithm is adopted for deployment on the condition that normal resource overheads of a security defense system are not influenced, rule deployment is conducted for the actual environment of the network, an access log attack analysis engine which can defend existing attacks and see through the potential attacks according to network conditions and has the independent attack analysis ability is adopted, and common attacks can be recognized through the access logs. According to the information security defense rule intelligent deployment method, on the condition that an existing security rule defense flow or principle is not influenced, intelligent deployment is conducted on the rules, and the intelligent deployment is different from manual deployment. On the basis of the existing manual deployment, defense pertinence of security products is improved, and server overheads are reduced to a greater degree.

Description

technical field [0001] The present invention relates to many security products currently on the market that need to configure defense rules. For example, firewalls and SS series security products of Inspur Group, the configuration of security rules needs to be set according to the needs of customers. Firewall is one of the most basic, economical and effective measures to realize network security. The firewall can strictly control all access (allow, prohibit, alarm). But it is static, while network security is dynamic and holistic. There are countless attack methods of hackers. Firewalls are not omnipotent, and it is impossible to completely prevent these intentional or unintentional attacks. There are hidden dangers here, and intelligent rule deployment can play a comprehensive defense and early warning function. technical background [0002] The traditional deployment of security rules is to add all or some rules to the system artificially according to the needs. Since t...

AI Technical Summary

Problems solved by technology

[0003] At present, the settings of many security defense systems are artificial and mechanical, and there is no scientific deployment of defense rules based on the actual environment

Images