CN111147521A - Enterprise private network security event management system - Google Patents

Enterprise private network security event management system Download PDF

Info

Publication number
CN111147521A
CN111147521A CN202010002982.3A CN202010002982A CN111147521A CN 111147521 A CN111147521 A CN 111147521A CN 202010002982 A CN202010002982 A CN 202010002982A CN 111147521 A CN111147521 A CN 111147521A
Authority
CN
China
Prior art keywords
module
security
network equipment
safety
network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202010002982.3A
Other languages
Chinese (zh)
Other versions
CN111147521B (en
Inventor
李锦基
黄永权
李明东
龙泽
曾洋林
付长财
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Gold Sea Comm Corp
Original Assignee
Gold Sea Comm Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Gold Sea Comm Corp filed Critical Gold Sea Comm Corp
Priority to CN202010002982.3A priority Critical patent/CN111147521B/en
Publication of CN111147521A publication Critical patent/CN111147521A/en
Application granted granted Critical
Publication of CN111147521B publication Critical patent/CN111147521B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1433Vulnerability analysis
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416Event detection, e.g. attack signature detection

Abstract

The invention discloses a security event management system of a special network for enterprises, which comprises: the terminal network equipment management system comprises a plurality of terminal network equipment management systems, a network security management platform and a security event library, wherein the plurality of terminal network equipment management systems are connected with the network security management platform. According to the invention, the scanning of the risk loopholes in the terminal network equipment system and the software installed on the terminal network equipment is realized through the security loophole scanning unit, the scanning of the risk loopholes on the system server, the router and the switch related to the terminal network equipment is realized at the same time, when network security monitoring and information acquisition are carried out, the network security status data connected with the terminal network equipment is acquired in time, the information acquisition of the terminal network equipment is realized at the same time, and the security scanning of the related equipment of the terminal network equipment is also realized, so that the acquired information is more comprehensive, and the comprehensive and effective network security management is realized.

Description

Enterprise private network security event management system
Technical Field
The invention relates to the technical field of network security management systems, in particular to a special network security event management system for enterprises.
Background
The computer network is an important means and way for people to know society and obtain information through modern information technology means, network security management is a fundamental guarantee that people can safely surf the internet, surf the internet in a green way and surf the internet in a healthy way, and meanwhile, the network security management is particularly important for enterprises, effectively prevents enterprise data from being stolen, and protects and navigates the normal development and operation of the enterprises.
The enterprise private network security incident management system is a network security management control system for enterprises, the network security incident management system used by the enterprise at present only realizes the collection of the connection network security and the state of the terminal network equipment when the security collection is carried out on each terminal network equipment, the system leak of the terminal network equipment and the correlated server, the router and the switch are lack of leak monitoring, the collected information is not comprehensive enough, the network security management can not be carried out comprehensively and effectively, the mode of carrying out security analysis processing at the same time is mostly that the information collected by the terminal network equipment is analyzed one by one, the analysis mode is single, and the accuracy and the comprehensiveness of the analysis are influenced.
Disclosure of Invention
The invention aims to solve the defects in the prior art and provides an enterprise private network security event management system.
In order to achieve the purpose, the invention adopts the following technical scheme: an enterprise private network security event management system comprising: a terminal network equipment management system, a network security management platform and a security event library;
the terminal network equipment management systems are all connected with a network security management platform, and the network security management platform is connected with a security event library;
the terminal network equipment management system comprises a safety monitoring unit and a safety control unit;
the safety monitoring unit is used for monitoring the network safety of the terminal network equipment, acquiring information and transmitting the acquired information to the network safety management platform;
the safety control unit is used for receiving a control instruction transmitted by the network safety management platform to realize safety control management on the terminal network equipment;
the network security management platform is used for receiving the security event information uploaded by the terminal network equipment management system, performing characteristic matching abnormity analysis on the received security event information and the security event library, and issuing a control instruction to the terminal network equipment management system;
the security event library is used for storing security event information.
As a further description of the above technical solution:
the safety monitoring unit comprises a network safety monitoring module, a network state monitoring module and a data acquisition module;
the network security monitoring module is used for monitoring network security data connected with the terminal network equipment, discovering network security events and generating corresponding monitoring logs;
the network state monitoring module is used for monitoring and collecting network condition data connected with the terminal network equipment;
the data acquisition module is used for transmitting the data acquired by the network security monitoring module and the network state monitoring module to the network security management platform.
As a further description of the above technical solution:
the security monitoring unit also comprises a security vulnerability scanning unit, the security vulnerability scanning unit is connected with the data acquisition module, and the information acquired by the security vulnerability scanning unit is transmitted to the network security management platform through the data acquisition module;
the security vulnerability scanning unit consists of a host vulnerability scanning module and a network vulnerability scanning module;
the host vulnerability scanning module is used for scanning a system of the terminal network equipment and risk vulnerabilities in software installed on the terminal network equipment and collecting host security vulnerability information;
and the network vulnerability scanning module is used for scanning risk vulnerabilities of a system server, a router and a switch which are connected with the terminal network equipment and collecting security vulnerability information.
As a further description of the above technical solution:
the safety control unit comprises a safety limiting module, an early warning limiting module and a limitation releasing module;
the safety limiting module is used for limiting the networking of the terminal network equipment after receiving a control instruction of the network safety management platform so as to disconnect the network connection of the terminal network equipment;
the early warning limiting module is used for limiting the access of the terminal network equipment after receiving a control instruction of the network security management platform, so that the terminal network equipment cannot access the enterprise confidential website;
and the limitation removing module is used for carrying out contact limitation on the terminal network equipment after receiving the control instruction of the network security management platform so as to recover the network connection of the terminal network equipment.
As a further description of the above technical solution:
the network security management platform comprises a data transmission module, a security detection analysis unit and an information display module;
the data transmission module is used for receiving the terminal network equipment safety information acquired by the safety monitoring unit;
the safety detection analysis unit is used for analyzing and processing the received terminal network equipment safety information and carrying out early warning;
the information display module is used for displaying the safety information analysis processing result of the terminal network equipment.
As a further description of the above technical solution:
the safety detection and analysis unit comprises an anomaly detection and analysis module, a data integration module, a cooperative detection and analysis module and a feature matching module;
the anomaly detection and analysis module and the data integration module are sequentially connected with each other, and the anomaly detection and analysis module and the collaborative detection and analysis module are both connected with the feature matching module, wherein the feature matching module is also connected with the security event library;
the anomaly detection and analysis module is used for analyzing various safety information of the terminal network equipment received by the data output and transmission module one by one, and comparing and analyzing the safety events stored in the safety event library through the characteristic matching module to obtain the network safety condition of the terminal network equipment;
the data integration module is used for integrating various safety information acquired by a plurality of terminal network equipment management systems to obtain total information, and then transmitting the integrated total information to the system detection and analysis module;
the collaborative detection analysis module is used for analyzing the total information after the integration processing of various safety information of the terminal network equipment management system, and comparing and analyzing the safety events stored in the safety event library through the characteristic matching module to obtain the network safety condition of the terminal network equipment.
As a further description of the above technical solution:
the network security management platform also comprises a terminal management module;
the terminal management module is used for the staff to realize the control instruction issuing to the safety control unit in the plurality of terminal network equipment management systems according to the information displayed by the display module, and then the safety control unit is used for carrying out the safety control on the terminal network equipment.
Advantageous effects
The invention provides a security event management system for an enterprise private network. The method has the following beneficial effects:
(1): the enterprise private network security incident management system scans risk leaks in terminal network equipment systems and software installed in the terminal network equipment through a security leak scanning unit, simultaneously scans risk leaks of a system server associated with the terminal network equipment, a router and a switch, collects network security status data connected with the terminal network equipment in time when network security monitoring and information collection are carried out, simultaneously collects information of the terminal network equipment, and also safely scans equipment associated with the terminal network equipment, so that the collected information is more comprehensive, and comprehensive and effective network security management is realized.
(2): the enterprise special network security event management system realizes one-to-one analysis and processing of various pieces of acquired terminal network equipment and feature matching analysis with the security event library, realizes collaborative analysis and processing of various pieces of acquired terminal network equipment after integration, and performs feature matching analysis with the security event library, realizes analysis and processing of network security states in two analysis modes, and improves accuracy and comprehensiveness of network security event analysis.
Drawings
Fig. 1 is a schematic diagram of an overall structure of an enterprise private network security event management system according to the present invention;
FIG. 2 is a schematic diagram of a safety monitoring unit according to the present invention;
FIG. 3 is a schematic diagram of a security vulnerability scanning unit in the present invention;
FIG. 4 is a schematic diagram of a safety control unit according to the present invention;
FIG. 5 is a diagram of a network security management platform according to the present invention;
FIG. 6 is a schematic diagram of a security detection and analysis unit according to the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments.
As shown in fig. 1-6, an enterprise private network security event management system includes: a terminal network equipment management system, a network security management platform and a security event library;
the terminal network equipment management systems are arranged in a plurality, and the terminal network equipment management systems are all connected with the network security management platform which is connected with the security event library;
the terminal network equipment management system comprises a safety monitoring unit and a safety control unit;
the safety monitoring unit is used for monitoring the network safety of the terminal network equipment, acquiring information and transmitting the acquired information to the network safety management platform;
the safety control unit is used for receiving a control instruction transmitted by the network safety management platform to realize safety control management on the terminal network equipment;
the network security management platform is used for receiving the security event information uploaded by the terminal network equipment management system, performing characteristic matching abnormity analysis on the received security event information and the security event library, and issuing a control instruction to the terminal network equipment management system;
the security event library is used for storing security event information.
The safety monitoring unit comprises a network safety monitoring module, a network state monitoring module and a data acquisition module;
the network security monitoring module is used for monitoring network security data connected with the terminal network equipment, discovering network security events and generating corresponding monitoring logs;
the network state monitoring module is used for monitoring and collecting network condition data connected with the terminal network equipment;
the data acquisition module is used for transmitting the data acquired by the network security monitoring module and the network state monitoring module to the network security management platform.
The security monitoring unit also comprises a security vulnerability scanning unit, the security vulnerability scanning unit is connected with the data acquisition module, and the information acquired by the security vulnerability scanning unit is transmitted to the network security management platform through the data acquisition module;
the security vulnerability scanning unit consists of a host vulnerability scanning module and a network vulnerability scanning module;
the host vulnerability scanning module is used for scanning a system of the terminal network equipment and risk vulnerabilities in software installed in the terminal network equipment and collecting host security vulnerability information;
and the network vulnerability scanning module is used for scanning risk vulnerabilities of a system server, a router and a switch which are connected with the terminal network equipment and acquiring security vulnerability information.
The method has the advantages that the scanning of the risk loopholes in the terminal network equipment system and the software installed in the terminal network equipment is realized through the host loophole scanning module and the network loophole scanning module in the security loophole scanning unit, meanwhile, the scanning of the risk loopholes of the system server, the router and the switch related to the terminal network equipment is realized, the network security monitoring module and the network state monitoring module are matched to realize the acquisition of network security status data connected with the terminal network equipment when the network security monitoring and the information acquisition are carried out, the information acquisition of the terminal network equipment is simultaneously realized, and the security scanning of the equipment related to the terminal network equipment is also realized, so that the acquired information is more comprehensive, and the comprehensive and effective network security management is realized.
The safety control unit comprises a safety limiting module, an early warning limiting module and a limitation releasing module;
the safety limiting module is used for limiting the networking of the terminal network equipment after receiving a control instruction of the network safety management platform so as to disconnect the network connection of the terminal network equipment;
the early warning limiting module is used for limiting the access of the terminal network equipment after receiving a control instruction of the network security management platform, so that the terminal network equipment cannot access the enterprise confidential website;
and the limitation removing module is used for carrying out contact limitation on the terminal network equipment after receiving the control instruction of the network security management platform so as to recover the network connection of the terminal network equipment.
The safety limiting module, the early warning limiting module and the limitation releasing module are used for realizing various safety limiting management on the terminal network equipment, and the terminal network equipment can be subjected to networking limitation, access limitation and connection recovery according to actual needs, so that the flexibility of management operation on the terminal network equipment is improved.
The network security management platform comprises a data transmission module, a security detection analysis unit and an information display module;
the data transmission module is used for receiving the terminal network equipment safety information acquired by the safety monitoring unit;
the safety detection analysis unit is used for analyzing and processing the received terminal network equipment safety information and carrying out early warning;
the information display module is used for displaying the safety information analysis processing result of the terminal network equipment.
The safety detection analysis unit comprises an anomaly detection analysis module, a data integration module, a cooperative detection analysis module and a feature matching module;
the anomaly detection and analysis module and the data integration module are connected in sequence, and the anomaly detection and analysis module and the collaborative detection and analysis module are both connected with the feature matching module, wherein the feature matching module is also connected with the security event library;
the abnormal detection analysis module is used for analyzing various safety information of the terminal network equipment received by the data output transmission module one by one, and comparing and analyzing the safety events stored in the safety event library through the characteristic matching module to obtain the network safety condition of the terminal network equipment;
the data integration module is used for integrating various safety information acquired by the terminal network equipment management systems to obtain total information, and then transmitting the integrated total information to the system detection and analysis module;
the collaborative detection analysis module is used for analyzing the total information after the integration processing of various safety information of the terminal network equipment management system, and comparing and analyzing the safety events stored in the safety event library through the characteristic matching module to obtain the network safety condition of the terminal network equipment.
The abnormity detection and analysis module is used for analyzing and processing all information of the acquired terminal network equipment one by one and performing characteristic matching analysis with the security event library, the cooperation detection and analysis module is used for realizing the cooperation of analysis and processing after integrating all information of the acquired terminal network equipment and performing characteristic matching analysis with the security event library, so that two analysis modes are matched to analyze and process the network security state, and the accuracy and the comprehensiveness of network security event analysis are improved.
The network security management platform also comprises a terminal management module;
the terminal management module is used for the staff to realize the control instruction issuing to the safety control unit in the plurality of terminal network equipment management systems according to the information displayed by the display module, and then the safety control unit is used for carrying out the safety control on the terminal network equipment.
In the description herein, references to the description of "one embodiment," "an example," "a specific example" or the like are intended to mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the invention. In this specification, the schematic representations of the terms used above do not necessarily refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.
The above description is only for the preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art should be considered to be within the technical scope of the present invention, and the technical solutions and the inventive concepts thereof according to the present invention should be equivalent or changed within the scope of the present invention.

Claims (7)

1. An enterprise private network security event management system, comprising: a terminal network equipment management system, a network security management platform and a security event library;
the terminal network equipment management systems are all connected with a network security management platform, and the network security management platform is connected with a security event library;
the terminal network equipment management system comprises a safety monitoring unit and a safety control unit;
the safety monitoring unit is used for monitoring the network safety of the terminal network equipment, acquiring information and transmitting the acquired information to the network safety management platform;
the safety control unit is used for receiving a control instruction transmitted by the network safety management platform to realize safety control management on the terminal network equipment;
the network security management platform is used for receiving the security event information uploaded by the terminal network equipment management system, performing characteristic matching abnormity analysis on the received security event information and the security event library, and issuing a control instruction to the terminal network equipment management system;
the security event library is used for storing security event information.
2. The enterprise-specific network security event management system according to claim 1, wherein the security monitoring unit comprises a network security monitoring module, a network status monitoring module and a data acquisition module;
the network security monitoring module is used for monitoring network security data connected with the terminal network equipment, discovering network security events and generating corresponding monitoring logs;
the network state monitoring module is used for monitoring and collecting network condition data connected with the terminal network equipment;
the data acquisition module is used for transmitting the data acquired by the network security monitoring module and the network state monitoring module to the network security management platform.
3. The enterprise private network security event management system according to claim 1, wherein the security monitoring unit further comprises a security vulnerability scanning unit, the security vulnerability scanning unit is connected with the data acquisition module, and the information acquired by the security vulnerability scanning unit is transmitted to the network security management platform through the data acquisition module;
the security vulnerability scanning unit consists of a host vulnerability scanning module and a network vulnerability scanning module;
the host vulnerability scanning module is used for scanning a system of the terminal network equipment and risk vulnerabilities in software installed on the terminal network equipment and collecting host security vulnerability information;
and the network vulnerability scanning module is used for scanning risk vulnerabilities of a system server, a router and a switch which are connected with the terminal network equipment and collecting security vulnerability information.
4. The enterprise-specific network security event management system of claim 1, wherein the security control unit comprises a security restriction module, an early warning restriction module, and a restriction release module;
the safety limiting module is used for limiting the networking of the terminal network equipment after receiving a control instruction of the network safety management platform so as to disconnect the network connection of the terminal network equipment;
the early warning limiting module is used for limiting the access of the terminal network equipment after receiving a control instruction of the network security management platform, so that the terminal network equipment cannot access the enterprise confidential website;
and the limitation removing module is used for carrying out contact limitation on the terminal network equipment after receiving the control instruction of the network security management platform so as to recover the network connection of the terminal network equipment.
5. The enterprise-specific network security event management system according to claim 1, wherein the network security management platform comprises a data transmission module, a security detection and analysis unit, and an information display module;
the data transmission module is used for receiving the terminal network equipment safety information acquired by the safety monitoring unit;
the safety detection analysis unit is used for analyzing and processing the received terminal network equipment safety information and carrying out early warning;
the information display module is used for displaying the safety information analysis processing result of the terminal network equipment.
6. The enterprise-specific network security event management system according to claim 5, wherein the security detection and analysis unit comprises an anomaly detection and analysis module, a data integration module, a collaborative detection and analysis module, and a feature matching module;
the anomaly detection and analysis module and the data integration module are sequentially connected with each other, and the anomaly detection and analysis module and the collaborative detection and analysis module are both connected with the feature matching module, wherein the feature matching module is also connected with the security event library;
the anomaly detection and analysis module is used for analyzing various safety information of the terminal network equipment received by the data output and transmission module one by one, and comparing and analyzing the safety events stored in the safety event library through the characteristic matching module to obtain the network safety condition of the terminal network equipment;
the data integration module is used for integrating various safety information acquired by a plurality of terminal network equipment management systems to obtain total information, and then transmitting the integrated total information to the system detection and analysis module;
the collaborative detection analysis module is used for analyzing the total information after the integration processing of various safety information of the terminal network equipment management system, and comparing and analyzing the safety events stored in the safety event library through the characteristic matching module to obtain the network safety condition of the terminal network equipment.
7. The system of claim 1, wherein the network security management platform further comprises a terminal management module;
the terminal management module is used for the staff to realize the control instruction issuing to the safety control unit in the plurality of terminal network equipment management systems according to the information displayed by the display module, and then the safety control unit is used for carrying out the safety control on the terminal network equipment.
CN202010002982.3A 2020-01-02 2020-01-02 Enterprise private network security event management system Active CN111147521B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010002982.3A CN111147521B (en) 2020-01-02 2020-01-02 Enterprise private network security event management system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010002982.3A CN111147521B (en) 2020-01-02 2020-01-02 Enterprise private network security event management system

Publications (2)

Publication Number Publication Date
CN111147521A true CN111147521A (en) 2020-05-12
CN111147521B CN111147521B (en) 2022-10-18

Family

ID=70523311

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010002982.3A Active CN111147521B (en) 2020-01-02 2020-01-02 Enterprise private network security event management system

Country Status (1)

Country Link
CN (1) CN111147521B (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112751927A (en) * 2020-12-30 2021-05-04 北京中辰普安电气科技有限公司 Network safety monitoring system applied to electric power monitoring system
CN113328991A (en) * 2021-04-22 2021-08-31 慧谷人工智能研究院(南京)有限公司 Network security test system
CN113987472A (en) * 2021-09-14 2022-01-28 北京纽盾网安信息技术有限公司 Webpage browsing security detection method, device and system

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101526962A (en) * 2009-04-03 2009-09-09 成都市华为赛门铁克科技有限公司 Generation method for security events of database, device and database system
CN101582883A (en) * 2009-06-26 2009-11-18 西安电子科技大学 System and method for managing security of general network
CN104834860A (en) * 2015-05-09 2015-08-12 福建六壬网安股份有限公司 Dynamic warehousing method for security events
CN104901838A (en) * 2015-06-23 2015-09-09 中国电建集团成都勘测设计研究院有限公司 Enterprise network safety event management system and method thereof
US20170272469A1 (en) * 2016-03-15 2017-09-21 Carbon Black, Inc. Using Private Threat Intelligence in Public Cloud
CN107517214A (en) * 2017-09-05 2017-12-26 合肥丹朋科技有限公司 System and method for providing computer network security
CN108494727A (en) * 2018-02-06 2018-09-04 成都清华永新网络科技有限公司 A kind of security incident closed-loop process method for network security management
CN108683549A (en) * 2018-06-08 2018-10-19 湖北鑫英泰系统技术股份有限公司 A kind of network security applied in electric power monitoring system monitors system
CN208227074U (en) * 2018-02-09 2018-12-11 鼎信信息科技有限责任公司 Electric power monitoring system network security monitors terminal

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101526962A (en) * 2009-04-03 2009-09-09 成都市华为赛门铁克科技有限公司 Generation method for security events of database, device and database system
CN101582883A (en) * 2009-06-26 2009-11-18 西安电子科技大学 System and method for managing security of general network
CN104834860A (en) * 2015-05-09 2015-08-12 福建六壬网安股份有限公司 Dynamic warehousing method for security events
CN104901838A (en) * 2015-06-23 2015-09-09 中国电建集团成都勘测设计研究院有限公司 Enterprise network safety event management system and method thereof
US20170272469A1 (en) * 2016-03-15 2017-09-21 Carbon Black, Inc. Using Private Threat Intelligence in Public Cloud
CN107517214A (en) * 2017-09-05 2017-12-26 合肥丹朋科技有限公司 System and method for providing computer network security
CN108494727A (en) * 2018-02-06 2018-09-04 成都清华永新网络科技有限公司 A kind of security incident closed-loop process method for network security management
CN208227074U (en) * 2018-02-09 2018-12-11 鼎信信息科技有限责任公司 Electric power monitoring system network security monitors terminal
CN108683549A (en) * 2018-06-08 2018-10-19 湖北鑫英泰系统技术股份有限公司 A kind of network security applied in electric power monitoring system monitors system

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112751927A (en) * 2020-12-30 2021-05-04 北京中辰普安电气科技有限公司 Network safety monitoring system applied to electric power monitoring system
CN113328991A (en) * 2021-04-22 2021-08-31 慧谷人工智能研究院(南京)有限公司 Network security test system
CN113987472A (en) * 2021-09-14 2022-01-28 北京纽盾网安信息技术有限公司 Webpage browsing security detection method, device and system
CN113987472B (en) * 2021-09-14 2023-07-18 北京纽盾网安信息技术有限公司 Webpage browsing security detection method, device and system

Also Published As

Publication number Publication date
CN111147521B (en) 2022-10-18

Similar Documents

Publication Publication Date Title
CN111147521B (en) Enterprise private network security event management system
CN105264861B (en) Method and apparatus for detecting multistage event
CN111404909B (en) Safety detection system and method based on log analysis
US8181248B2 (en) System and method of detecting anomaly malicious code by using process behavior prediction technique
KR101883400B1 (en) detecting methods and systems of security vulnerability using agentless
CN108270716A (en) A kind of audit of information security method based on cloud computing
CN107483438A (en) A kind of network security situation awareness early warning system and method based on big data
CN112039862A (en) Multi-dimensional stereo network-oriented security event early warning method
CN111212035A (en) Host computer defect confirming and automatic repairing method and system based on same
CN112039858A (en) Block chain service security reinforcement system and method
CN114050937B (en) Mailbox service unavailability processing method and device, electronic equipment and storage medium
CN110049015B (en) Network security situation awareness system
CN107666464A (en) A kind of information processing method and server
KR101444250B1 (en) System for monitoring access to personal information and method therefor
CN112134870B (en) Network security threat blocking method, device, equipment and storage medium
KR101973728B1 (en) Integration security anomaly symptom monitoring system
CN106878338B (en) Telecontrol equipment gateway firewall integrated machine system
CN115618353A (en) Identification system and method for industrial production safety
CN114756870A (en) Multi-dimensional information security risk assessment system based on SoS system
KR20010047844A (en) A remote computer anti-virus system and process on the network
JP2005227982A (en) Network system equipped with security monitoring function, log data analysis terminal and information terminal
CN116668062B (en) Network security operation and maintenance management platform based on data analysis
CN113395235B (en) IoT system remote testing method, system and equipment
Armoogum et al. Digital Forensics of Cyber Physical Systems and the Internet of Things
CN115632833A (en) Network security processing method and device, computer equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant