Internet risk management method and system based security as service

Abstract

The invention discloses an internet risk management method based on security as service. The method comprises the following steps: receiving a website access request transmitted from a user, and returning an IP address which corresponds to the website access request to the user so that the user can visit a website server through the IP address; and monitoring the website server, and returning a mistaken interface to the user who visits the website when a website in which security events occur in the website server. According to the internet risk management method provided by an embodiment, the website server is detected through cloud detection; when the security events occur, website access operation of the user is intercepted automatically, and response is in time; and steps of deployment of security equipment such as a firewall are omitted, and the running and maintenance cost is low. Meanwhile, only the ability of cloud detection and monitoring of the security events needs to be updated, and the protecting ability of the system to a website server can be improved. The invention further discloses an internet risk management system, and the technical effect can also be achieved.

Description

technical field [0001] The present invention relates to the field of cloud computing, and more specifically, to an Internet risk management method and system based on security as a service. Background technique [0002] With the rapid development of the Internet, more and more Internet-oriented businesses are becoming more and more important, and the security problems are becoming more and more serious. According to statistics from authoritative departments, more than 60% of security incidents are aimed at Internet services Weaknesses are infiltrated, such as web sites, OA systems, etc., and according to the statistics of Internet business problems in recent years by organizations such as CVND and CNCERT, it is found that the high-risk vulnerabilities of external business are on the rise year by year, and malicious tampering incidents are also increasing. It is increasing year by year, especially in the government, education and other industries, which has caused a great neg...

AI Technical Summary

Problems solved by technology

[0003] In the existing technology, security checks and guarantees for Internet services generally require the deployment of security devices such as firewalls. The operation is complex, the operation and maintenance costs are high, and continuous monitoring cannot be performed. The response to problems found is not timely, and sudden serious situations cannot be quickly controlled. , leading to the rapid spread of the scope of security incidents

At the same time, with the rapid growth of attack & protection methods, such as web attacks, DDos, APT and other new attack methods, traditional protection methods are slow to update and weak in response

[0004] To sum up, the existing security solutions for Internet services cannot meet the current security status

Images