Title:
RANSOMWARE DEFENSE METHOD AND SYSTEM BASED ON TRUSTED COMPUTING, AND RELATED DEVICE
Document Type and Number:
WIPO Patent Application WO/2023/024125
Kind Code:
A1
Abstract:
Disclosed in the present invention are a ransomware defense method and system based on trusted computing, and a related device. The method of the present solution comprises: automatically acquiring traffic information in a network, and determining a service data traffic relationship between various network assets; establishing an access control policy according to a trusted access list, isolating a logical network in the network, re-dividing a network region, and forming a micro-isolation region inside the network; virtualizing a corresponding virtual IP and port, forming a corresponding honeypot group, and mixing the honeypot group with an actual host in the network; and when the number of times that a honeypot is accessed exceeds a set number of times, regarding the IP as an untrusted object for interception. By means of the ransomware defense solution based on trusted computing provided in the present invention, behaviors of malicious programs such as ransomware can be rapidly detected and effectively restrained in a timely manner, or the risk of the malicious programs such as ransomware is controlled to be in a micro-isolation region, thereby greatly improving the security of "east-west" traffic (an inner boundary) of the network.
Inventors:
TAO YUAN (CN)
HU WEI (CN)
LI MOYAN (CN)
LI MING (CN)
ZHANG YUXIANG (CN)
HU WEI (CN)
LI MOYAN (CN)
LI MING (CN)
ZHANG YUXIANG (CN)
Application Number:
PCT/CN2021/115509
Publication Date:
March 02, 2023
Filing Date:
August 31, 2021
Export Citation:
Assignee:
THIRD RES INST MINISTRY PUBLIC SECURITY (CN)
International Classes:
G06F21/56; H04L9/40
Foreign References:
| CN112398844A | 2021-02-23 | |||
| CN112565197A | 2021-03-26 | |||
| US20210120022A1 | 2021-04-22 | |||
| CN111277539A | 2020-06-12 | |||
| US20200336510A1 | 2020-10-22 |
Attorney, Agent or Firm:
SHANGHAI L&W INTELLECTUAL PROPERTY LAW OFFICE, LLC (CN)
Download PDF:
Previous Patent: INJECTION MOLDING DEVICE
Next Patent: VORICONAZOLE-CONTAINING OPHTHALMIC GEL, AND PREPARATION METHOD THEREFOR AND USE THEREOF
Next Patent: VORICONAZOLE-CONTAINING OPHTHALMIC GEL, AND PREPARATION METHOD THEREFOR AND USE THEREOF