局域网异构终端管控及安全技术研究

打开文本图片集

中图分类号：TP309.5 文献标识码：A文章编号：1006-8228（2025）10-61-05

Abstract：HowtocarryoutunifedcontrolandsecuritysupervisionofheterogeneousterminalsintheLANhasalwaysbeena problemthatisconstantlybeingexploredinthenetworksecurityfield.Thispaperinnovativelyconstructsaterminalsecurity governancesystembasedonprotectionsoftware，andaggregatesandgovernsthedataofdiferentterminalsecuritymanagement systemsthroughRESTfulAPItechnology，therebylayingadatafoundationforthesystemtoperceivetheglobalterminalsituation andconductcorelationanalysis.Throughassetsynchronzation，IPextraction，threatdetectionsituationanalysisamongother technologies，thesystemrealizestheunifiedmanagementandcontrolofheterogeneousterminals，aswellasteminalfulfctor situationawarenessandsituationpresentation.Theintroductionofasecurtylargemodelhaseabledrealtimenoisereductionfor all alerts，with practical verification showing an alert noise reduction rate of 94.1% ，which has cumulatively saved 2194 hoursof investigationandjudgmenttime.Meanhilethesystem'suilt-inscurityinteligenceanalysismoduleonductsreal-tieaalsis andjudgmentofsecurtyevents.Theproposedarchitecturerealizesthesharingofsecurityinformationandjointdefenselinkage betweendiferentterminalsystems，andforsamorecompleteterminalsecurityprotectionsystemandprovidesefectiveolution forinfrastructure security protection in the context of digital transformation.

eywords：Endpoint Control; Endpoint Security；Terminal Situation;Security Large Model

0引言

终端作为网络边界的关键触点，承载着用户身份、业务数据与系统权限的三重属性，既是数字化生产力的核心载体，也是攻击者穿破多层防护体系的薄弱环节。（剩余4312字）