A Multi-Domain Collaborative Security Policy Intelligent Generation Method

Abstract

The invention discloses a multi-domain collaborative security policy intelligent generation method, aiming at the application mode of domain autonomy and multi-domain coordination of the information system in the mobile network environment, and constructing the network resources of each domain node under the condition of reducing the network resource overhead as much as possible. Inter-intelligent and efficient collaborative operation mechanism, including intra-domain asset trusted registration mechanism, intra-domain asset trusted perception mechanism, single-domain external asset information chain generation mechanism, single-domain external asset information chain notification mechanism, and inter-domain alliance asset information chain release mechanism , inter-domain alliance asset information chain update mechanism and distributed node security policy intelligent generation mechanism, based on this, the intelligent generation and intelligent deployment of security policies can be realized in parallel in each area of ​​the mobile network environment, fundamentally changing the current cumbersome and inefficient Manually configure the security policy process, and promote the transformation of security policies in the mobile network environment from a single-point, manual configuration management model to a collaborative, intelligent management model.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a multi-domain collaborative security policy intelligent generation method. Background technique [0002] Since the mobile environment network information system generally requires wide-area and decentralized deployment, and the communication channel has many characteristics such as high dynamics, strong confrontation, and weak connection, and based on task requirements, it is necessary to realize multi-region dynamic networking and collaborative work, but it is currently cumbersome and low-cost. An efficient manual configuration security policy process not only requires a large number of security management personnel in the mobile environment, but also greatly increases the time for the deployment and dynamic reconfiguration of the network information system, which has always been one of the bottlenecks restricting the development of the mobile network security system. ...

AI Technical Summary

Problems solved by technology

[0002] Since the mobile environment network information system generally requires wide-area and decentralized deployment, and the communication channel has many characteristics such as high dynamics, strong confrontation, and weak connection, and based on task requirements, it is necessary to realize multi-region dynamic networking and collaborative work, but it is currently cumbersome and low-cost. An effective manual configuration security policy process not only requires a large number of security management personnel in the mobile environment, but also greatly increases the time for network information system deployment and dynamic reconfiguration, which has always been one of the bottlenecks restricting the development of mobile network security systems. one

[0003] At present, in the research direction of intelligent generation of network security policies, Fu Yu and others have proposed "a generation algorithm based on network attack and defense graph". Multi-source fusion processing with vulnerability information, and can only generate network attack and defense diagrams, but cannot automatically generate security policies; The publishing and notification mechanism of distributed heterogeneous network security policies does not involve the automatic generation and automatic deployment mechanism of heterogeneous network security policies

Images