Safety system dynamics

For security, some people give the following definition: "Safety means that its hardware, software, and data are protected from accidental and malicious reasons, and are not destroyed, changed, or leaked, and the system continues to operate normally."

For security, some people give the following definition: "Safety means that its hardware, software, and data are protected from accidental and malicious reasons, and are not destroyed, changed, or leaked, and the system continues to operate normally." This definition implies security dynamics. The dynamic nature of network protection is manifested in the following aspects:

First, the dynamic requirements of the system.

The entire network security system should introduce as many variables as possible and have good scalability. If encryption loses the need for confidentiality before it is deciphered, even if the encryption algorithm is not unbreakable, it is safe to be protected. In other words, the shorter the lifetime of the encrypted data and the more variable factors, the higher the system's security performance, such as the periodic replacement of passwords and master keys, the secure transmission using a one-time session key, and the dynamic selection of Use encryption algorithms, etc. On the other hand, various password attacks and deciphering methods are constantly developing. The so-called security is only relative and temporary. The security system must be updated and upgraded accordingly according to the development of attack methods.

Second, the dynamics.

And software in the design and development process will inevitably have some defects and loopholes. These loopholes and flaws are precisely the main link in the existence of hidden dangers. The security vulnerabilities of network systems are dynamically discovered or discovered. Different issues in day-to-day management will introduce new problems and new system components will introduce new problems. Therefore, loopholes and hidden dangers are dynamically developed. Its timeliness, complexity, uncertainty of attack, configuration relevance, and relativity are the causes of its dynamic nature.

Third, dynamic networks need to be dynamic.

The purpose of establishing a network is to share resources and communicate. This means existence. The strength of cybersecurity depends only on the strength of the weakest connection in the network, the so-called "barrel principle." With the development, the continuous upgrading of network equipment and the continuous expansion of the network scale, the network has become a dynamic development body.

The security of the network is dynamically developed. Hackers are also highly motivated. Any service or service configuration is not enough. Therefore, it is an ongoing process. Security policies should adapt to the dynamics of the network.

Fourth, the dynamics of the system.

China Electronics Technology Co., Ltd., through years of experience in security protection, proposes a dynamic security protection system description: security = risk assessment + security policy + defense system + real-time attack detection and rapid response + attack source tracking forensics + data recovery + dynamic adjustment. Among them, the risk assessment is to analyze the security risks and give reports, to prepare for the accurate formulation of security policies; the security strategy is the core and outline of the entire security protection system; the defense system includes hidden scan, vulnerability detection, filter isolation, system Security solidification and hidden trouble repair; attack real-time detection and rapid response refers to the alarm blocking (IDS) and related emergency response plans and implementation; attack source tracking forensics is to record the attack behavior, obtain attack evidence services; data recovery including backup, automatic recovery , ensure recovery, rapid recovery, etc.; dynamically adjust intelligent feedback mechanisms that are designed to improve system performance.