Active threat detection system

Abstract

The invention discloses an active threat detection system. Through an Internet outlet deployed at a unit needing monitoring, massive dispersed security information produced by a monitoring host, network equipment and safety equipment is regulated, gathered, filtered and analyzed in a correlation manner. A gateway monitoring system is linked with the virus feature library, the malicious domain library and other national-level network security data centers of the national computer network emergency response technical team / coordination center of China. Various national basis resources are fully utilized to make linkage analysis and intelligent decision so as to accurately find out various complex network security events. Hidden security problems existing in an in-network host are found through comparison of corresponding traffic characteristics, thus achieving the functions of gate traffic monitoring, pre-warning and filtering. The active threat detection system of the invention has the beneficial effect that the system has strong defense capability and can fully guarantee the security of the financial information system.

Description

technical field [0001] The invention relates to the technical field of information service platforms, in particular to an active threat discovery system. Background technique [0002] In recent years, the Internet has developed rapidly in my country and has become an important information infrastructure in many fields such as politics, economy, culture, and military affairs. At the same time, the network security situation is becoming more and more serious, viruses, Trojan horses and other network security threats are increasing, and network attacks are becoming more and more profitable. , electric power) network security incidents are on the rise. Once a serious network attack on these systems occurs, it will inevitably damage the public interest and even affect national security and social stability. Contents of the invention [0003] In order to overcome the deficiencies of the prior art above, the present invention provides an active threat discovery system. [0004]...

AI Technical Summary

Problems solved by technology

At the same time, the network security situation is becoming more and more serious, viruses, Trojan horses and other network security threats are increasing, and network attacks are becoming more and more profitable. , electric power) the number of network security incidents is on the rise. Once a serious network attack against these systems occurs, it will inevitably damage the public interest and even affect national security and social stability.

Images