A unified accusation method and system for network security equipment

Abstract

The invention belongs to the technical field of network security, and in particular relates to a unified accusation method and system for network security equipment, comprising the following steps: generating a network defense strategy according to received network threat intelligence; judging whether the generated network defense strategy contains local area network information , command the command center to send a request to all LAN managers to update the attribute lists of all managed LAN security devices; generate corresponding network defense commands through the security devices specified in the network defense policy and their command format files, and send them to The aforementioned LAN security device; the LAN security device executes the network defense command and returns a response to the command command center. The present invention dynamically and uniformly instructs various security devices, and the security devices include an intrusion detection system, a virtual private network, and a security gateway, and can perform rapid defense.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a unified accusation method and system for network security equipment. Background technique [0002] STIX, or Structured Threat Information Expression, is a language and serialization format for exchanging cyber threat intelligence (CTI). Being able to share CTI with each other in a consistent and machine-readable manner allows the security community to better understand the computer-based attacks they are most likely to see, and to predict and respond to these attacks more quickly and effectively. [0003] TAXII, Trusted Automatic Intelligent Information Exchange, is an application layer protocol for delivering cyber threat information in a simple and scalable manner. TAXII enables organizations to share CTI by defining APIs that align with common sharing models. [0004] The current network defense is single, and can only be defended through statically co...

AI Technical Summary

Problems solved by technology

[0004] The current network defense is single, and can only be defended through statically configured security devices in the LAN. It cannot make good use of network threat intelligence and defense strategies, and lacks coordinated defense between various LANs.

Images