基于主动防御模型的信息安全管理平台研究

摘要

With the rapid development of information,the threats against network security are growing day by day.A consum-mate network security solution becomes an urgent need for the healthy development of network.Taking scientific and effective tech-nical measures to prevent the presence of unknown intrusion,malicious code,network vulnerability and virus is the key to guarantee the network security.The active detection technology must be adopted to find and analyze security events in practical work.This pa-per proceeds from reality,and presents an active defense model which can ensure the IP network’s reliability,availability,control-lability and non -repudiation.The security management platform collects events of safety equipment in various ways,and processes them intelligently,which makes it easy for users to locate illegal events quickly and effectively,and liberates the staffs from multifa-rious evaluation work.%信息化进程的快速推进使得网络面临的威胁日益增多，为保障网络健康发展，迫切需要一套完善的网络安全解决方案。保障网络安全，关键是采取科学有效的技术手段，防止出现未知入侵行为、恶意代码、漏洞及网络病毒。在实际工作中，必须采取主动的检测技术，快速定位分析安全事件。从实际出发，提出一种主动防御模型，确保 IP 网络满足可靠性、可用性、可控性和不可抵赖性的安全要求。安全管理平台通过多种方式采集网络中各类安全设备的安全事件，并对这些安全事件进行智能化处理，便于用户快速有效定位非法事件，使工作人员从繁杂的评估工作中解放出来。