The Design And Implementation Of A Research And Development Platform With Detection And Emergency Disposal Aiming At Information System

In recent years,due to the continuous development of the network mode in application,such as cloud computing,web services,internet of things,the mode of network attack and so on,they all have been developing,so it is certainly necessary to follow up the step of development with more excellent technology in time,for dealing with the developing network attack.At the same time,the network security dynamic protection system of network security is short of perfect protection strategy and real-time disposal measures.In view of the problems existing in the dynamic security protection of application system,this paper presents the design and implementation of a research and development platform with detection and emergency disposal toward dynamic protection of the application system.This platform includes five subsystems,including subsystem of network attacks,the honeypot subsystem,vulnerability detection subsystem,the security situation analysis subsystem,subsystem of command and control.It is deployed to the application system,providing a proactive,initiative and real-time dynamic protection for application system.The platform has the following characteristics:(1)By combining the technique of static analysis and dynamic analysis,the vulnerability analysis technology can be used to improve the accuracy of the system.Besides,the platform deploys reverse analysis system with a variety of reverse analysis technology,including binary code reverse analysis and source code reverse analysis,for exploring vulnerabilities in system.(2)Analyzing attack of network by combining the vulnerability analysis and security incident detection can be used to improve the accuracy of detection if it has been attacked.Besides,the platform deploys a network analysis system,as a comprehensive analysis platform for the result of security vulnerability detection,based on security situation.After that,a real-time visualization report of the security situation assessment can be given,according to weak system with vulnerability,vulnerability distribution condition and system operation data.(3)The platform deploys command and control system and supports the security policyconfiguration,moreover,it will constitute a controlling closed-loop through unified scheduling a lot of security equipment and security mechanism of application system’s own.The construction of the platform has exemplary significance to the system construction of the security protection around the application system,and provides the basic environment for the construction of the relevant standards and the development of technology.