Network security monitoring method and system

Abstract

The invention provides a network security monitoring method and system and relates to the field of communications. The system comprises an access security execution unit and a security strategy engine unit; the access security execution unit transmits a user security strategy query request, carrying a user identifier and / or a network address, to the security strategy engine unit, acquires a corresponding user security strategy from a user security strategy query response returned from the security strategy engine unit, and executes the user security strategy for a user; the security strategy engine unit receives the user security strategy query request, extracts the user identifier and / or the network address from the request, determines user identify corresponding to the extracted user identifier and / or the network address, queries a corresponding user security strategy according to the user identity, and feeds back the queried user security strategy through user security strategy query response. The invention further discloses a network security monitoring method. The network security monitoring method and system according to the technical scheme allow execution of security strategies of network users.

Description

technical field [0001] The invention relates to the field of communication, in particular to methods and systems for access control, identity authentication and data monitoring in the field of network security. Background technique [0002] The initial development of the Internet was characterized by freedom and openness. While promoting social progress, democratic development, and economic prosperity, it also brought some hidden dangers in public safety and network security. Compared with the various constraints in the real society, any network behavior can only be traced to a certain IP (Internet Protocol Internet Protocol) address, so people tend to lack self-discipline on their behavior, and some even use the Internet to commit crimes. [0003] With the development of the Internet, especially the explosive growth of the number of Internet users and Internet applications, and the rapid development of the mobile Internet, relatively high requirements have been put forward ...

AI Technical Summary

Problems solved by technology

[0004] In order to ensure the security of the Internet, it is a common method and technology to implement network security monitoring and management based on security policies. Among them, a technology based on user identity needs to set security policies according to user identity, but network users are often assigned after logging into the network. Dynamic network address, which brings certain obstacles to setting security policies by users

Images