Linkage defense strategy intelligent decision method and system of security protection device

Abstract

The invention provides a linkage defense strategy intelligent decision method and system of a security protection device. The method includes steps: when receiving an alarm message, selecting a corresponding defense strategy triggering condition in predefined defense strategy triggering conditions according to an alarm type, and establishing a network attack graph according to a bug related to thealarm message; determining a corresponding linkage defense strategy in a pre-established defense strategy template database according to the selected defense strategy triggering condition, and generating a to-be-selected linkage defense strategy set; calculating system security risk values of the strategies acting on the network attack graph in the set one by one; and determining a final linkagedefense strategy according to the system security risk values. According to the above scheme, acquisition, deep data mining and event associative analysis of IT resource events in a network security domain are performed, and monitoring and management of various security events can be realized; and a decision service is provided for secure operation of an information system based on a development trend of overall information security, and the security of network assets and normal operation of the network are ensured.

Description

technical field [0001] The invention belongs to the field of load calculation methods for transmission line design, and in particular relates to an intelligent decision-making method and system for safety protection equipment linkage defense strategies. Background technique [0002] With the continuous expansion of the network scale, the continuous expansion of user needs and the continuous increase of new services, the network system presents the characteristics of scale, service diversification and management distribution, which brings challenges to system evaluation, operation and security maintenance . And in recent years, the speed of discovery of computer network system vulnerabilities has been accelerating, large-scale worms, viruses, and denial of service attacks have continued to break out, and the network security situation is not optimistic. How to ensure the security of large-scale network systems has become a problem to be solved urgently. [0003] Traditional...

AI Technical Summary

Problems solved by technology

[0005] However, the existing traditional security equipment and information security integrated management platform have not realized the linkage of security policies, so that administrators often have no way to choose a reasonable and feasible linkage response strategy in the face of massive alarm information of security equipment and the evolution curve of security situation. start

Images