Method based on security domain policy analysis and electronic equipment

• Main Authors: LIU XIAOLEI, LI ZHIQI, WANG LIBIN, SONG JIE, LI NING, YIN QIN, HUO YU, REN LEI, CHEN GUANGYUN, JIAO TENG, LIU SHENGLONG, SU ZHANFEI, YANG YANG, ZHAO JING, FENG LEI, HONG YE
• Format: Patent
• Language: Chinese; English
• Published: 20.09.2019
• Subjects: ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention discloses a method based on security domain policy analysis and electronic equipment. The method comprises the following steps: collecting basic information of firewall equipment; acquiring configuration information of the firewall equipment according to the basic information of the firewall equipment; analyzing the configuration information of the firewall equipment to form a configuration file; extracting a security policy from the configuration file; and analyzing and checking the security policy, so that the security policy is uniformly analyzed and processed, and the sorting efficiency of the firewall security policy is improved. 本发明公开了一种基于安全域策略分析的方法和电子设备，通过收集防火墙设备的基本信息；根据所述防火墙设备的基本信息采集所述防火墙设备的配置信息；解析所述防火墙设备的配置信息，形成配置文件；从所述配置文件中提取安全策略；对所述安全策略进行分析核查，从而对安全策略进行统一解析，统一处理，从而提高防火墙安全策略的梳理效率。