Industrial host terminal security protection system

Abstract

The embodiment of the invention discloses an industrial host terminal security protection system. The system integrates the core functions of behavior monitoring, virus searching and killing, remote investigation and evidence obtaining, linkage defense, risk situation display and the like. The advanced technologies of behavior recognition, multi-engine sample identification, neural network, trapping, immunization and the like are adopted, real-time detection and disposal of known and unknown threats are achieved, and the threats which cannot be effectively defended by traditional security products, such as ransomware, mining, killing-free escape, file-free attack and the like, are effectively solved. By acquiring full kernel-level particle size behavior data in real time through a lightweight terminal Agent program to continuously monitor a terminal system, and screening out an event which is beneficial for a customer to carry out threat tracing from the event and storing the event, rapid analysis and response (including determination of a zero damaged terminal, an attack range and the like) of the threat event are realized, the maximum protection is obtained with the minimum resource overhead, and the terminal security management capability of the client is comprehensively improved.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of network security, in particular to an industrial host terminal security protection system. Background technique [0002] The network has become an incubator for contemporary economic prosperity, technological progress, and social awareness by breaking the boundaries of time and space and changing social networks and economic driving methods. It has also caused the current society to be unable to stop relying on the network, and the seriousness of network security issues has gradually become prominent. The proliferation of viruses, system loopholes, hacker attacks and many other problems have directly affected network security. Network security is the foundation of national security, without network security there is no national security! [0003] Border protection equipment provides security protection at each entrance of the network, but for threats from internal sources such a...

AI Technical Summary

Problems solved by technology

[0004] For this reason, the embodiment of the present invention provides an industrial host terminal security protection system to solve the problem that traditional antivirus software cannot discover and defend against APT, and terminal security cannot be guaranteed

Images