Network system safety protection method and device and related equipment thereof

Abstract

The invention discloses a network system safety protection method, which comprises the steps of performing information collection according to a received protection instruction to obtain network system information; vulnerability detection is carried out on the network system information to obtain network vulnerabilities; attacking the network vulnerability by using a preset automatic attack model;obtaining an attack result corresponding to the successfully attacked network vulnerability; performing vulnerability repair on the network vulnerability according to the attack result; the network system safety protection method can effectively realize automatic, verifiable, high-efficiency and high-precision penetration test and real-time system defense. The invention also discloses a network system safety protection device and system, and a computer readable storage medium, which all have the above beneficial effects.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a network system security protection method, and also relates to a network system security protection device, system and computer-readable storage medium. Background technique [0002] Due to the rapid development of informatization construction, the efficiency and accuracy requirements for online system attack defense are constantly improving, and the traditional manual intervention method can no longer meet the complex security requirements of modern security attack defense. [0003] At present, in terms of security monitoring of the cloud, management platform, terminal, and Internet environment, there is a lack of effective and targeted technical means that can better meet the business needs of real-time attack defense, and it is impossible to fully grasp the system security situation and attack resistance capabilities , cannot clearly and accurately judge t...

AI Technical Summary

Problems solved by technology

[0002] Due to the rapid development of informatization construction, the efficiency and accuracy requirements for online system attack defense are constantly improving, and the traditional manual intervention method can no longer meet the complex security requirements of modern security attack defense

[0003] At present, in terms of security monitoring of the cloud, management platform, terminal, and Internet environment, there is a lack of effective and targeted technical means that can better meet the business needs of real-time attack defense, and it is impossible to fully grasp the system security situation and attack resistance capabilities , cannot clearly and accurately judge the existing security risks, and effectively warn in advance, and cannot deal with the security incidents in a standardized and effective manner

For example, when there is a network attack in the online operation scenario of the enterprise, problems such as information leakage, unauthorized control, system denial of service, and command execution are prone to occur, which will lead to economic and reputation losses of the enterprise; when the school network management system is operating online. When there are internal and external network attacks, problems such as data tampering, batch student information leakage, and academic confidential information leakage are prone to occur, which will lead to accidents in student management and the latest national research leaks, etc.

[0004] In the existing technology, in order to solve the above problems, foreign manufacturers are based on the research of security threats in simple network environments. Basically, no manufacturer can fully provide automated attack and defense drills for complex network environments, so as to provide automated penetration testing and security defense. , and fully complies with the relevant platform systems of my country's information security level protection construction and inspection requirements; however, domestic manufacturers cannot fully meet the requirements of the automated attack and defense drill platform under the complex network environment of big data in terms of data mining, security accumulation, industry understanding, etc. Requirements at all levels involved in construction and safety technology construction

Images