Abnormal data response method, system and device, computer equipment and storage medium

Abstract

The invention relates to an abnormal data response method, system and device, computer equipment and a storage medium. According to the invention, when the intelligent gateway is utilized to detect entry of abnormal data, log data representing network security state information sent by a plurality of pieces of network security equipment connected with the intelligent gateway is acquired, feature information including the current network security state is generated through the log data, and then, the feature information is sent to a security management center; the security management center determines the security situation of the current network according to the feature information; a corresponding security policy is generated and sent to the intelligent gateway; the intelligent gateway responds to the security policy and processes the abnormal data; compared with a traditional method that abnormal data can only be processed through fixed filtering conditions, the method senses the abnormal data through the intelligent gateway and can process the abnormal data according to the security policy sent by the security management center, the effect of more comprehensively responding to the abnormal data is achieved, and the security of abnormal data processing is improved.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to an abnormal data response method, system, device, computer equipment and storage medium. Background technique [0002] With the development of Internet technology, computers can conduct network communication and data transmission through the Internet, and this demand is becoming more and more frequent. Therefore, under the increasingly frequent demand for network communication and data transmission, it is guaranteed The security of transmitted network data, especially ensuring the security of data flowing into the network becomes very important, and an important step to ensure the security of data flowing into the network is to process abnormal data, and the processing of abnormal data is usually Through the gateway, traditional gateways usually only set corresponding filtering conditions to check abnormal data or issue warnings. However, this abnormal data pro...

AI Technical Summary

Problems solved by technology

[0002] With the development of Internet technology, computers can conduct network communication and data transmission through the Internet, and this demand is becoming more and more frequent. Therefore, under the increasingly frequent demand for network communication and data transmission, it is guaranteed The security of transmitted network data, especially to ensure the security of data flowing into the network becomes very important, and an important step to ensure the security of data flowing into the network is to process abnormal data, and the processing of abnormal data is usually Through the gateway, the traditional gateway usually only sets the corresponding filter conditions to check the abnormal data or give a warning. However, this abnormal data processing method is relatively inflexible, and it is easy to provide opportunities for hackers to intrude, resulting in network intrusion

[0003] Therefore, the traditional abnormal data response processing method has the defect of low security

Images