CN109600397A

CN109600397A - A kind of network security monitoring and managing method

Info

Publication number: CN109600397A
Application number: CN201910076567.XA
Authority: CN
Inventors: 钱乐旦
Original assignee: Wenzhou University
Current assignee: Wenzhou University
Priority date: 2019-01-26
Filing date: 2019-01-26
Publication date: 2019-04-09

Abstract

The present invention relates to technical field of network security, the invention discloses a kind of network security monitoring and managing methods, access control including network, the attack-defending of internet worm, the safety of data, network hole reparation and inspection and the security protection of computer, the invention is illustrated danger present on network from many aspects and proposes corresponding solution, it can preferably solve the problems, such as network security, to avoid the infringement of virus, and to being made that regulation in the method using network of user, so as to effectively improve the safety and normalization that internet uses.

Description

A kind of network security monitoring and managing method

Technical field

The present invention relates to technical field of network security more particularly to a kind of network security monitoring and managing methods.

Background technique

Network security refers to that the data in the hardware, software and its system of network system are protected, not because accidental or The reason of person's malice and by destruction, change, leakage, system is continuously reliably normally run, and network service is not interrupted.

Network security monitoring and managing method in the prior art is incomplete and specific, and the user without being directed to user Formula is specifically explained, therefore is unfavorable for promoting.

Summary of the invention

The invention proposes a kind of network security monitoring and managing methods, to solve the problems mentioned in the above background technology.

The invention proposes a kind of network security monitoring and managing methods, include the following steps:

A, the access control of network: access control is the important means of Protection of Network Security and protection, its main task It is maintenance network system security, guarantees that Internet resources are not illegally used and access very much, in technology realization, including it is following several A part:

A1, access control: access control provides first layer access control for network access, is network access Barrier at first, which user it, which controls, can log on to server and obtain Internet resources, control permit user-network access when Between and permit them and network in some specific work station；

A2, resources accessing control: being the access control management to object entirety resource information, including file system Access control (file directory access control and system access control), file attribute access control, information content access control with And file directory access control；

The access control of A3, the network port and node: node and port in network often encrypted transmission data, these are heavy The management of position is wanted to must be prevented from the attack that hacker starts, for managing and modifying data, it should be enough it is required that visitor provides Prove the validator of identity；

B, the attack-defending of internet worm, specifically includes the following aspects:

B1, of unknown origin Email and file are not opened arbitrarily, not run stranger at will to your journey Formula is similar to " Troy " class hacker formula and just needs to deceive your operation；

B2, it avoids downloading nameless software and game formula from Internet as far as possible, even if downloading from well-known website Software also will in time with it is newest virus and wooden horse killing software software and system are scanned；

B3, password setting use alphanumeric as far as possible, and simple English or number are very easy to exhaustion, will commonly use Password be arranged different, prevent from being found one by people, related to arrive important password, important password is most preferably often replaced；

B4, support HTML BBS on, such as discovery submit warning, referring initially to source code, it is however very well possible to be defraud of password fall into Trap；

C, the safety of data: being carried out the transmission of data by network, need to guarantee the integrality and confidentiality of data, and When can to data sender carry out identity verifying, specific step is as follows for realization:

C1, One-Way Encryption is done to the data of data sender first, obtains the condition code of data；

C2, encryption generation specific code M1 is carried out with the private key of sender to the condition code obtained in C1；

C3, symmetric cryptography generation M2 is carried out to the M1 and data generated in C2；

C4, finally the password of the M2 generated in C3 and symmetric cryptography encrypted using the public key of recipient, to make It obtains the integrality confidentiality in the transmission process of data and can be protected to the verifying of sender's identity；

D, network hole reparation and inspection: periodically carrying out comprehensive loophole inspection to computer, understands computer system In the service that opens up and port, the loophole that understands the gimmick of current hacker attack and can be utilized, hacker invades work Tool detection, which checks, whether there is these loopholes in the computer system of oneself, discovery loophole is repaired in time；

E, the security protection of computer, including the following steps:

E1, a trustworthy antivirus software and firewall are installed in a computer, and during computer operation Forbid privately closing firewall and antivirus software, find there is virus in computer, should the antivirus of suspension immediately, must not make It is worked with viruliferous computer is taken, virus is avoided to spread through the internet to entire local area network；

E2, in company and enterprises so that computer be only used for writing material and utilize in-company office Domain net carries out inquiry data, must not watch movie using network, play game, chat and speculation in stocks；

E3, the computer for carrying and preserving the important confidential information of company should be applicable in fixed online IP, without permission, Internet must not be accessed without exception.

Preferably, after completing step C, when data reach recipient, recipient first use the private key of oneself to data into Row decryption, is obtained the data of password and encryption, encryption data is decrypted using password, the condition code sum number encrypted According to the public key decryptions condition code of sender, if it is possible to decrypt, then illustrate that the data are sent out by sender, it is on the contrary then not It is finally to be compared in the specific code for calculating the condition code of data and decrypting, be capable of detecting when whether data are repaired in this way Change.

Preferably, punishment system is carried out in company and enterprise: the employee of company and enterprise has act in violation of the stipulations One of, below discovery three times (including three times), 200 or less place is imposed a fine, and more than three times, company will release labor with the employee for discovery Dynamic circuit connector is same；

Preferably, during logging in website, as network tourist, the discrimination for constantly improving itself is needed to discover energy Power could more effectively protect oneself.

Preferably, before internet development is got up, viral propagation depends on floppy disc, and the present public frequently uses Movable storage device transmits file, these mobile devices become the important channel that wooden horse is propagated, and user should disable oneself of USB flash disk Dynamic playing function, the risk for avoiding movable storage device from contaminating.

A kind of network security monitoring and managing method proposed by the present invention, beneficial effect are the network supervision method from many aspects Corresponding solution is illustrated and proposed to danger present on network, can preferably solve the problems, such as network security, To avoid the infringement of virus, and to regulation is made that in the method using network of user, so as to effectively improve The safety and normalization that internet uses.

Specific embodiment

It is next combined with specific embodiments below that the present invention will be further described.

A kind of network security monitoring and managing method, includes the following steps:

A, the access control of network: access control is the important means of Protection of Network Security and protection, its main task It is maintenance network system security, guarantees that Internet resources are not illegally used and access very much, in technology realization, including it is following several A aspect:

A1, access control: access control provides first layer access control for network access, is network access Barrier at first, which user it, which controls, can log on to server and obtain Internet resources, control permit user-network access when Between and permit them and network in some specific work station, what is realized such as ISP service provider is exactly access service, the access visit of user Ask that control is the verifying to legitimate user, the authentication mode of user's the user name and password can be divided into three steps: user name Identification and verifying, the identification of user password and verifying and the default limitation inspection of user account；

A2, resources accessing control: being the access control management to object entirety resource information, including file system Access control (file directory access control and system access control), file attribute access control, information content access control, text Part directory access control refers to that user and user group are endowed certain permission, and under the rule control license of permission, which is used Family and which accessible catalogue of user group, subdirectory, file and other resources, which user can be to which texts therein Which kind of operation part, catalogue, subdirectory, equipment are able to carry out, and system access control refers to that a network system administrator is should be User specifies access authority appropriate, these access privilege controls access of the user to server, password locking clothes should be set Business device console should set server log time limit preventing illegal user's modification, deleting important information or destroying data System, time interval unauthorized access person detection and closed, reply network implementation monitoring, record access of the user to Internet resources, Illegal network is accessed, can use figure or text or form of sound alarm, file attribute access control, when with file, mesh Record and when the network equipment, should specify access attribute to file, catalogue, attribute security control can by given attribute with to access File, catalogue and the network equipment connect；

C4, finally the password of the M2 generated in C3 and symmetric cryptography encrypted using the public key of recipient, to make It obtains the integrality confidentiality in the transmission process of data and can be protected to the verifying of sender's identity, complete After step C, when data reach recipient, recipient is first decrypted data with the private key of oneself, obtains password and encryption Data, encryption data is decrypted using password, the condition code and data encrypted, it is special with the public key decryptions of sender Levy code, if it is possible to it decrypts, then illustrates that the data are sent out by sender, it is on the contrary then be not, finally in the feature of calculating data Code and the specific code decrypted compare, and are capable of detecting when whether data are modified in this way；

E, the security protection of computer, including the following steps:

Punishment system is carried out in company and enterprise: the employee of company and enterprise has infringement, hair Now following three times (including three times), 200 or less place is imposed a fine, and more than three times, company will release labour contract, tool with the employee for discovery Behavior as defined in body is as follows；

(1), to the accident occurred in computer information system not by regulation report, cause data divulge a secret and virus in office It is spread in the net of domain；

(2), I or leave that other people in the computer of oneself play game, the amusement watching movie and chat using internet Behavior；

(3), do not unify installation antivirus software and firewall as requested, be turned off privately during the operation of computer Behavior；

(4), using the computer for carrying and preserving the important confidential information of company, accessing internet causes data to be divulged a secret And viral behavior in computer.

During logging in website, as network tourist, needs constantly to improve the discrimination diagnostic ability of itself, could more have The protection of effect oneself, before internet development is got up, viral propagation depends on floppy disc, and the present public is frequently using shifting Dynamic storage equipment transmits file, these mobile devices become the important channel that wooden horse is propagated, and user should disable the automatic of USB flash disk Playing function, the risk for avoiding movable storage device from contaminating.

The foregoing is only a preferred embodiment of the present invention, but scope of protection of the present invention is not limited thereto, Anyone skilled in the art in the technical scope disclosed by the present invention, according to the technique and scheme of the present invention and its Inventive concept is subject to should be covered by the protection scope of the present invention with replacing or changing.

Claims

1. a network security supervision method, is characterized in that, comprises the steps:

A. Network access control: Access control is an important means of network security prevention and protection. Its main task is to maintain network system security and ensure that network resources are not illegally used and accessed very much. In terms of technical implementation, it includes the following aspects :

A1. Access access control: Access access control provides the first layer of access control for network access and is the first barrier to network access. It controls which users can log in to the server and obtain network resources, and controls the time and time when users are allowed to access the network. Allow them to access the network at a specific workstation;

A2. Resource access control: It is the access control management of the overall resource information of the object, including file system access control (file directory access control and system access control), file attribute access control, information content access control and file directory access control;

A3. Access control of network ports and nodes: nodes and ports in the network often encrypt and transmit data. The management of these important locations must prevent attacks launched by hackers. For managing and modifying data, visitors should be required to provide a validator sufficient to prove their identity. ;

B, network virus attack prevention, including the following aspects:

B1. Don't open emails and files from unknown sources at will, and don't run programs given to you by strangers. Hacker programs similar to "Troy" need to trick you into running;

B2. Try to avoid downloading unknown software and game programs from the Internet. Even if you download software from well-known websites, you should use the latest virus and Trojan killing software to scan the software and system in time;

B3. Use alphanumerics to set passwords as much as possible. Simple English or numbers are very easy to be exhausted. Set the commonly used passwords differently to prevent someone from finding one, and even to important passwords. It is best to change important passwords frequently;

B4. On the BBS that supports HTML, if you find a submission warning, look at the source code first, it is very likely to be a trap to defraud the password;

C. Data security: For data transmission through the network, it is necessary to ensure the integrity and confidentiality of the data, and to be able to verify the identity of the data sender in time. The specific steps are as follows:

C1. First, perform one-way encryption on the data of the data sender to obtain the characteristic code of the data;

C2. Encrypt the feature code obtained in C1 with the sender's private key to generate a special code M1;

C3. Symmetrically encrypt the M1 and data generated in C2 to generate M2;

C4. Finally, encrypt the M2 and the symmetric encrypted password generated in C3 with the public key of the receiver, so that the integrity and confidentiality of the data transmission process and the verification of the sender's identity can be guaranteed;

D. Network vulnerability repair and inspection: Regularly conduct a comprehensive vulnerability inspection on the computer, understand the services and ports opened in the computer system, understand the current hacker attack methods and the vulnerabilities that can be exploited, and hacker intrusion tools to detect and check their own computer system. Whether these loopholes exist, and the loopholes are found and repaired in time;

E. Computer security protection, including the following steps:

E1. Install a trustworthy anti-virus software and a firewall on the computer, and it is forbidden to turn off the firewall and anti-virus software without permission during the running of the computer. If a virus is found in the computer, the network should be disconnected immediately to kill the virus, and the computer carrying the virus should not be used for work. , to prevent the virus from spreading to the entire local area network through the network;

E2. In the company and within the enterprise, the computer is only used for writing materials and using the company's internal local area network to query materials, and it is not allowed to use the Internet to watch movies, play games, chat or speculate in stocks;

E3. Computers that carry and store important confidential information of the company should use a fixed Internet access IP, and must not access the Internet without permission.

2. a kind of network security supervision method according to claim 1, is characterized in that, after completing C step, when data reaches receiver, receiver decrypts data with own private key earlier, obtains password and encryption Use the password to decrypt the encrypted data, obtain the encrypted feature code and data, and use the sender's public key to decrypt the feature code. The characteristic code of the calculated data is compared with the decrypted special code, which can detect whether the data has been modified.

3. A kind of network security supervision method according to claim 1, it is characterised in that in the company and the enterprise implement a punishment system: the company and the enterprise's employees have one of the violations of regulations, found three times or less (including three times), A fine of less than 200 yuan will be imposed, and if found more than three times, the company will terminate the labor contract with the employee.

4. A kind of network security supervision method according to claim 1, is characterized in that, in the process of logging on to the website, as a network visitor, it is necessary to constantly improve one's own ability to distinguish and detect, so as to protect oneself more effectively.

5. a kind of network security supervision method according to claim 1 is characterized in that, before the Internet develops, the spread of virus depends on floppy disk, and now the public frequently uses mobile storage devices to transfer files, and these mobile devices become Trojan horses to spread The user should disable the automatic playback function of the USB flash drive to avoid the risk of poisoning the mobile storage device.