A network security active defense resource allocation method and system

Abstract

The present invention relates to the technical field of production devices, in particular to a network security active defense resource allocation method and system. The following scheme is now proposed, which includes the following steps: establishing a risk transfer model for network security nodes, and taking the overall network transfer risk as the network security initiative The objective function of the defense resource configuration is to establish the constraints of the network security active defense resource configuration, and the network security active defense resources are configured according to the objective function and the constraint conditions in combination with the node characteristics and business characteristics of the deployment environment. The invention combines the multi-node and multi-service features of the real deployment environment, realizes the rational optimal configuration of the active defense resources of the energy Internet network security of the actual intelligent park system, and avoids the blind problem of the existing technology based on the experience-based defense resource allocation.

Description

technical field [0001] The invention relates to the field of energy internet, in particular to a network security active defense resource allocation method and system. Background technique [0002] With the continuous integration of smart grid and "Internet +" technology, energy Internet has become a current research hotspot. While realizing the integration of "information flow, energy flow, and business flow", the multi-level network structure of the Energy Internet involves various cutting-edge technologies, covers various types of machinery and equipment, and integrates multiple complex applications, which increases the system's exposure to network attacks. possibility. [0003] The energy Internet network security defense system in the prior art is a passive protection system composed of technologies such as firewalls, antivirus software, encryption algorithms, and intrusion detection systems, which are mainly used to block known threats and patch system vulnerabilities...

AI Technical Summary

Problems solved by technology

However, in the current increasingly complex energy Internet environment, passive protection methods cannot cope with new types of attacks that are constantly updated, resulting in an asymmetrical situation in which network security defense is easy to attack and difficult to defend.

Images